810 matches found
CVE-2016-7462
The Suite REST API in VMware vRealize Operations aka vROps 6.x before 6.4.0 allows remote authenticated users to write arbitrary content to files or rename files via a crafted DiskFileItem in a relay-request payload that is mishandled during deserialization...
CVE-2016-7457
VMware vRealize Operations aka vROps 6.x before 6.4.0 allows remote authenticated users to gain privileges, or halt and remove virtual machines, via unspecified vectors...
CVE-2016-7460
The Single Sign-On feature in VMware vCenter Server 5.5 before U3e and 6.0 before U2a and vRealize Automation 6.x before 6.2.5 allows remote attackers to read arbitrary files or cause a denial of service via an XML document containing an external entity declaration in conjunction with an entity...
CVE-2016-7460
The Single Sign-On feature in VMware vCenter Server 5.5 before U3e and 6.0 before U2a and vRealize Automation 6.x before 6.2.5 allows remote attackers to read arbitrary files or cause a denial of service via an XML document containing an external entity declaration in conjunction with an entity...
CVE-2016-5334
CVE-2016-5334 affects VMware Identity Manager 2.x < 2.7.1 and vRealize Automation 7.x
CVE-2016-7462
CVE-2016-7462 affects VMware vRealize Operations (vROps) 6.x prior to 6.4.0. The REST API deserialization vulnerability allows remote authenticated users to write arbitrary content to files or rename files via a crafted DiskFileItem in a relay-request payload mishandled during deserialization. VM...
CVE-2016-5334
VMware Identity Manager 2.x before 2.7.1 and vRealize Automation 7.x before 7.2.0 allow remote attackers to read /SAAS/WEB-INF and /SAAS/META-INF files via unspecified vectors...
CVE-2016-7460
CVE-2016-7460 refers to an XML External Entity (XXE) vulnerability in the Single Sign-On feature of VMware products. Affects vCenter Server 5.5 before U3e and 6.0 before U2a, and vRealize Automation 6.x before 6.2.5. A specially crafted XML document containing an external entity declaration and a...
CVE-2016-7457
CVE-2016-7457 affects VMware vRealize Operations (vROps) 6.x prior to 6.4.0. A privilege-escalation vulnerability could allow a remote authenticated vROps user (low-privileged) to gain full access to the application and potentially stop or delete virtual machines. The primary root cause is a priv...
VMware Identity Manager and vRealize Automation Information Disclosure Vulnerability
VMware Identity Manager and vRealize Automation are both VMware products. vMware Identity Manager is an Identity-as-a-Service IDaaS product that provides application provisioning, self-service catalogs, and Single Sign-On SSO for SaaS, Web, Cloud, and native mobile applications. vMware vRealize...
XML External Entity Injection Vulnerability in Multiple VMware Products
VMware vCenter Server is a suite of server and virtualization management software from VMware, Inc. VMware vRealize Automation is a suite of cloud automation software from VMware, Inc. An XML external entity injection vulnerability exists in multiple VMware products and can be exploited by an...
VMware vRealize Automation XML External Entity (XXE) Vulnerability (VMSA-2016-0022)
VMware vRealize Automation contain an XML External Entity XXE vulnerability in the Single Sign-On functionality. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
VMware vRealize Automation Partial Information Disclosure Vulnerability (VMSA-2016-0021)
There is a partial information disclosure vulnerability in VMware Identity Manager as used by vRealize Automation. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
VMware Releases Security Update
VMware has released a security update to address a vulnerability in vRealize Operations. Exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition. US-CERT encourages users and administrators to review VMware Security Advisory VMSA-2016-0020 and apply the...
VMware vRealize Operating Platform Remote Code Execution Vulnerability
VMware vRealize Operations is a set of policy-based, automated, intelligent IT operations and management software from VMware, Inc. A remote code execution vulnerability exists in the VMware vRealize Operations platform. An attacker could exploit the vulnerability to execute arbitrary code in the...
VMware vRealize Operations Privilege Escalation Vulnerability (VMSA-2016-0016)
VMware vRealize Operations is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
VMware vRealize Operations REST API Deserialization Vulnerability (VMSA-2016-0020)
VMware vRealize Operations is prone to a deserialization vulnerability in its REST API implementation. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
VMSA-2016-0020:vRealize Operations update addresses REST API deserialization vulnerability
VMSA-2016-0020 vRealize Operations update addresses REST API deserialization vulnerability. VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0020 VMware Security Advisory Severity: Important VMware Security Advisory Synopsis: vRealize Operations update addresses REST API...
VMware vRealize Operations Remote Elevation of Privilege Vulnerability
VMware vRealize Operations is a set of policy-based, automated, intelligent IT operations and management software from VMware, Inc. A remote elevation of privilege vulnerability exists in VMware vRealize Operations. A remote attacker could exploit this vulnerability to gain full control of an...