Vrealize Automation Security Vulnerabilities and Issues — Vrealize Automation CVE List

Lucene search

VmwareVrealize Automation

2 matches found

CVE•added 2018/04/13 1:29 p.m.•47 views

CVE-2018-6959

VMware vRealize Automation (vRA) prior to 7.4.0 contains a vulnerability in the handling of session IDs. Exploitation of this issue may lead to the hijacking of a valid vRA user's session.

9.8CVSS9.3AI score0.013EPSS

CVE•added 2018/04/13 1:29 p.m.•44 views

CVE-2018-6958

VMware vRealize Automation (vRA) prior to 7.3.1 contains a vulnerability that may allow for a DOM-based cross-site scripting (XSS) attack. Exploitation of this issue may lead to the compromise of the vRA user's workstation.

6.1CVSS6.1AI score0.00222EPSS