Vcenter Server@5.0 Security Vulnerabilities and Issues — Vcenter Server@5.0 CVE List

Lucene search

VmwareVcenter Server5.0

9 matches found

CVE•added 2015/10/12 10:59 a.m.•146 views

CVE-2015-2342

The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 before u1 does not restrict registration of MBeans, which allows remote attackers to execute arbitrary code via the RMI protocol.

10CVSS7.7AI score0.92031EPSS

CVE•added 2015/10/12 10:59 a.m.•72 views

CVE-2015-1047

vpxd in VMware vCenter Server 5.0 before u3e, 5.1 before u3, and 5.5 before u2 allows remote attackers to cause a denial of service via a long heartbeat message.

5CVSS7.1AI score0.02916EPSS

CVE•added 2014/07/17 11:17 a.m.•61 views

CVE-2014-4241

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0 allows remote attackers to affect integrity via vectors related to WLS - Web Services.

4.3CVSS5.8AI score0.00912EPSS

CVE•added 2013/02/22 8:55 p.m.•53 views

CVE-2013-1659

VMware vCenter Server 4.0 before Update 4b, 5.0 before Update 2, and 5.1 before 5.1.0b; VMware ESXi 3.5 through 5.1; and VMware ESX 3.5 through 4.1 do not properly implement the Network File Copy (NFC) protocol, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of...

7.6CVSS7.5AI score0.0113EPSS

CVE•added 2016/07/03 1:59 a.m.•49 views

CVE-2015-6931

Cross-site scripting (XSS) vulnerability in the vSphere Web Client in VMware vCenter Server 5.0 before U3g, 5.1 before U3d, and 5.5 before U2d allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

6.1CVSS6AI score0.00159EPSS

CVE•added 2013/02/22 8:55 p.m.•46 views

CVE-2012-6326

VMware vCenter Server 4.1 before Update 3 and 5.0 before Update 2, and vCSA 5.0 before Update 2, allows remote attackers to cause a denial of service (disk consumption) via vectors that trigger large log entries.

7.8CVSS6.7AI score0.00403EPSS

CVE•added 2016/12/29 9:59 a.m.•46 views

CVE-2016-7459

VMware vCenter Server 5.5 before U3e and 6.0 before U2a allows remote authenticated users to read arbitrary files via a (1) Log Browser, (2) Distributed Switch setup, or (3) Content Library XML document containing an external entity declaration in conjunction with an entity reference, related to an...

7.7CVSS7.9AI score0.00549EPSS

CVE•added 2013/10/21 10:54 a.m.•44 views

CVE-2013-5971

Session fixation vulnerability in the vSphere Web Client Server in VMware vCenter Server 5.0 before Update 3 allows remote attackers to hijack web sessions and gain privileges via unspecified vectors.

6.8CVSS6.7AI score0.00504EPSS

CVE•added 2016/06/08 2:59 p.m.•41 views

CVE-2016-2078

Cross-site scripting (XSS) vulnerability in the Web Client in VMware vCenter Server 5.1 before update 3d, 5.5 before update 3d, and 6.0 before update 2 on Windows allows remote attackers to inject arbitrary web script or HTML via the flashvars parameter.

6.1CVSS6AI score0.00209EPSS