vRealize Automation, vSphere Integrated Containers, and AirWatch Console updates address multiple security vulnerabilities

a. vRealize Automation and vSphere Integrated Containers deserialization vulnerability via Xenon

vRealize Automation and vSphere Integrated Containers contain a deserialization vulnerability via Xenon. Successful exploitation of this issue may allow remote attackers to execute arbitrary code on the appliance.

The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the identifier CVE-2017-4947 to this issue.

Column 5 of the following table lists the action required to remediate the vulnerability in each release, if a solution is available.