Design/Logic Flaw

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect integrity via vectors related to WebClient / Admin...

Vmware vCenter Server XSS

The vulnerability of the vSphere Web Client component, which is used for managing the virtual infrastructure of Vmware vCenter Server, exists due to the lack of security measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary We...

VMware vCenter Server Java Execution

The vulnerability of the VMware vSphere Web Client software for managing virtual infrastructure, specifically the VMware vCenter Server, is related to configuration errors of the JMX server. These errors arise due to the lack of authentication and encryption procedures when clients connect to the...

Cross site scripting

Cross-site scripting XSS vulnerability in the vSphere Web Client in VMware vCenter Server 5.0 before U3g, 5.1 before U3d, and 5.5 before U2d allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2015-6931

Cross-site scripting XSS vulnerability in the vSphere Web Client in VMware vCenter Server 5.0 before U3g, 5.1 before U3d, and 5.5 before U2d allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2015-6931

Cross-site scripting XSS vulnerability in the vSphere Web Client in VMware vCenter Server 5.0 before U3g, 5.1 before U3d, and 5.5 before U2d allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2015-6931

CVE-2015-6931 is a reflected XSS in the vSphere Web Client of VMware vCenter Server. The vulnerability arises from insufficient input sanitization, allowing remote attackers to inject script via a crafted URL. Affected versions: vCenter Server 5.0 before 5.0u3g, 5.1 before 5.1u3d, and 5.5 before ...

CVE-2015-6931: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the vSphere Web Client in VMware vCenter Server 5.0 before U3g, 5.1 before U3d, and 5.5 before U2d allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

PT-2016-2329

Name of the Vulnerable Software and Affected Versions VMware vCenter Server versions 5.0 before U3g VMware vCenter Server versions 5.1 before U3d VMware vCenter Server versions 5.5 before U2d Description The issue is related to a cross-site scripting XSS vulnerability in the vSphere Web Client...

CVE-2016-4371

HPE Service Manager Software 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote authenticated users to obtain sensitive information, modify data, and conduct server-side request forgery SSRF attacks via unspecified vectors, related to the Server, Web Client, Windows Client, and...

Server side request forgery (ssrf)

HPE Service Manager Software 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote authenticated users to obtain sensitive information, modify data, and conduct server-side request forgery SSRF attacks via unspecified vectors, related to the Server, Web Client, Windows Client, and...

PT-2016-5917

Name of the Vulnerable Software and Affected Versions HPE Service Manager Software versions 9.30 through 9.41 Description The issue allows remote authenticated users to obtain sensitive information, modify data, and conduct server-side request forgery SSRF attacks. This is related to the Server,...

CVE-2016-4371: Cross-Site Request Forgery (CSRF)

HPE Service Manager Software 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote authenticated users to obtain sensitive information, modify data, and conduct server-side request forgery SSRF attacks via unspecified vectors, related to the Server, Web Client, Windows Client, and...

VMSA-2016-0009:VMware vCenter Server updates address an HIGH reflected cross-site scripting issue

VMSA-2016-0009 VMware vCenter Server updates address an important reflected cross-site scripting issue VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0009 VMware Security Advisory Synopsis: VMware vCenter Server updates address an important reflected cross-site scripting...

CVE-2016-2078

Cross-site scripting XSS vulnerability in the Web Client in VMware vCenter Server 5.1 before update 3d, 5.5 before update 3d, and 6.0 before update 2 on Windows allows remote attackers to inject arbitrary web script or HTML via the flashvars parameter...

CVE-2016-2078

Cross-site scripting XSS vulnerability in the Web Client in VMware vCenter Server 5.1 before update 3d, 5.5 before update 3d, and 6.0 before update 2 on Windows allows remote attackers to inject arbitrary web script or HTML via the flashvars parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in the Web Client in VMware vCenter Server 5.1 before update 3d, 5.5 before update 3d, and 6.0 before update 2 on Windows allows remote attackers to inject arbitrary web script or HTML via the flashvars parameter...

CVE-2016-2078: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Web Client in VMware vCenter Server 5.1 before update 3d, 5.5 before update 3d, and 6.0 before update 2 on Windows allows remote attackers to inject arbitrary web script or HTML via the flashvars parameter...

PT-2016-5004

Name of the Vulnerable Software and Affected Versions VMware vCenter Server versions 5.1 before update 3d VMware vCenter Server versions 5.5 before update 3d VMware vCenter Server versions 6.0 before update 2 Description A cross-site scripting XSS issue exists in the Web Client of VMware vCenter...

CVE-2016-2025

HPE Service Manager 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote attackers to obtain sensitive information via unspecified vectors, related to the Web Client, Service Request Catalog, and Mobility components...