Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
VmwareVrealize Log Insight*

12 matches found

CVE
CVE•added 2023/01/26 9:15 p.m.•169 views

CVE-2022-31704

The vRealize Log Insight contains a broken access control vulnerability. An unauthenticated malicious actor can remotely inject code into sensitive files of an impacted appliance which can result in remote code execution.

9.8CVSS9.8AI score0.7997EPSS
CVE
CVE•added 2023/01/26 9:15 p.m.•118 views

CVE-2022-31710

vRealize Log Insight contains a deserialization vulnerability. An unauthenticated malicious actor can remotely trigger the deserialization of untrusted data which could result in a denial of service.

7.5CVSS7.6AI score0.00738EPSS
CVE
CVE•added 2023/01/26 9:15 p.m.•117 views

CVE-2022-31706

The vRealize Log Insight contains a Directory Traversal Vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution.

9.8CVSS9.7AI score0.82654EPSS
CVE
CVE•added 2023/01/26 9:15 p.m.•76 views

CVE-2022-31711

VMware vRealize Log Insight contains an Information Disclosure Vulnerability. A malicious actor can remotely collect sensitive session and application information without authentication.

5.3CVSS6.8AI score0.72034EPSS
CVE
CVE•added 2022/07/12 9:15 p.m.•75 views

CVE-2022-31654

VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improper input sanitization in configurations.

5.4CVSS5.1AI score0.01306EPSS
CVE
CVE•added 2022/12/14 7:15 p.m.•74 views

CVE-2022-31703

The vRealize Log Insight contains a Directory Traversal Vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution.

7.5CVSS8AI score0.00497EPSS
CVE
CVE•added 2022/07/12 9:15 p.m.•61 views

CVE-2022-31655

VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improper input sanitization in alerts.

5.4CVSS5.1AI score0.01306EPSS
CVE
CVE•added 2021/08/30 7:15 p.m.•53 views

CVE-2021-22021

VMware vRealize Log Insight (8.x prior to 8.4) contains a Cross Site Scripting (XSS) vulnerability due to improper user input validation. An attacker with user privileges may be able to inject a malicious payload via the Log Insight UI which would be executed when the victim accesses the shared das...

5.4CVSS5.3AI score0.00402EPSS
CVE
CVE•added 2021/10/13 4:15 p.m.•45 views

CVE-2021-22035

VMware vRealize Log Insight (8.x prior to 8.6) contains a CSV(Comma Separated Value) injection vulnerability in interactive analytics export function. An authenticated malicious actor with non-administrative privileges may be able to embed untrusted data prior to exporting a CSV sheet through Log I...

4.3CVSS4.5AI score0.00444EPSS
CVE
CVE•added 2018/11/13 10:29 p.m.•42 views

CVE-2018-6980

VMware vRealize Log Insight (4.7.x before 4.7.1 and 4.6.x before 4.6.2) contains a vulnerability due to improper authorization in the user registration method. Successful exploitation of this issue may allow Admin users with view only permission to perform certain administrative functions which the...

7.2CVSS6.8AI score0.003EPSS
CVE
CVE•added 2020/04/15 6:15 p.m.•39 views

CVE-2020-3953

Cross Site Scripting (XSS) vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation.

4.8CVSS5.1AI score0.00284EPSS
CVE
CVE•added 2020/04/15 6:15 p.m.•32 views

CVE-2020-3954

Open Redirect vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation.

6.1CVSS6.1AI score0.00503EPSS