Recently modified vulnerabilities for "vmware vcenter" 5.0

Where

AND

Sort:

VMware vCenter ServerVMware vCenter Server 4.0 before Update 4b, 5.0 before Update 2, and 5.1 before 5.1.0b; VMware ESXi …

Risk 67

Severity

7.6

AV:N/AC:H/Au:N/C:C/I:C/A:C

VMware vCenter Server 4.0 before Update 4b, 5.0 before Update 2, and 5.1 before 5.1.0b; VMware ESXi 3.5 through 5.1; and VMware ESX 3.5 through 4.1 do not properly implement the Network File Copy (NFC) protocol, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption) by modifying the client-server data stream.

First published (updated )

CVE-2013-1659

VMware vCenter ServerBuffer Overflow

Risk 44

Severity

7.8

Buffer Overflow

AV:N/AC:L/Au:N/C:N/I:N/A:C

VMware vCenter Server 4.1 before Update 3 and 5.0 before Update 2, and vCSA 5.0 before Update 2, allows remote attackers to cause a denial of service (disk consumption) via vectors that trigger large log entries.

First published (updated )

CVE-2012-6326

VMware vCenter ServerSession fixation vulnerability in the vSphere Web Client Server in VMware vCenter Server 5.0 before …

Risk 47

Severity

6.8

AV:N/AC:M/Au:N/C:P/I:P/A:P

Session fixation vulnerability in the vSphere Web Client Server in VMware vCenter Server 5.0 before Update 3 allows remote attackers to hijack web sessions and gain privileges via unspecified vectors.

First published (updated )

CVE-2013-5971

VMware vCenter ServerXSS

Risk 38

Severity

6.1

XSS

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Cross-site scripting (XSS) vulnerability in the vSphere Web Client in VMware vCenter Server 5.0 before U3g, 5.1 before U3d, and 5.5 before U2d allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

First published (updated )

CVE-2015-6931

VMware vCenter ServerThe JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 …

Risk 87

Severity

AV:N/AC:L/Au:N/C:C/I:C/A:C

The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 before u1 does not restrict registration of MBeans, which allows remote attackers to execute arbitrary code via the RMI protocol.

First published (updated )

CVE-2015-2342

VMware vCenter ServerInput Validation

Risk 26

Severity

Input Validation

AV:N/AC:L/Au:N/C:N/I:N/A:P

vpxd in VMware vCenter Server 5.0 before u3e, 5.1 before u3, and 5.5 before u2 allows remote attackers to cause a denial of service via a long heartbeat message.

First published (updated )

CVE-2015-1047

VMware vCenter ServerXEE

Risk 44

Severity

7.7

XEE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

VMware vCenter Server 5.5 before U3e and 6.0 before U2a allows remote authenticated users to read arbitrary files via a (1) Log Browser, (2) Distributed Switch setup, or (3) Content Library XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

First published (updated )

CVE-2016-7459

CVE-2016-2078XSS

Risk 38

Severity

6.1

XSS

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Cross-site scripting (XSS) vulnerability in the Web Client in VMware vCenter Server 5.1 before update 3d, 5.5 before update 3d, and 6.0 before update 2 on Windows allows remote attackers to inject arbitrary web script or HTML via the flashvars parameter.

First published (updated )

CVE-2016-2078