zVirt Authentication Bypass

The vulnerability of the authentication system of the zVirt virtualization platform relates to the redirection of URLs to unreliable websites when processing the redirecturl parameter. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to...

zVirt Unauthenticated Access Disclosure

The vulnerability of the application programming interface of the zVirt virtualization platform is related to access control errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information by sending a specially crafted G...

zVirt Arbitrary JavaScript Execution

The vulnerability of the zVirt virtualization platform lies in the lack of protection for the structure of the web page during the processing of the errordescription parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code, provided that the user open...