Known vulnerabilities in vCenter Server 5.0

Vendor: Broadcom
Software: vCenter Server
Version: 5.0
Software CPE: cpe:2.3:a:broadcom:vcenter-server:*:*:*:*:*:*:*:*
Website: https://www.broadcom.com/
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting vCenter Server version 5.0 vCenter Server 5.0 is affected by 5 vulnerabilities: 3 medium, 2 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU39958 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2016-7459		 CWE-611 Medium
No
No
 - 29.12.2016 SB2015091901
#VU40221 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-6931		 CWE-79 Low
No
No
 - 03.07.2016 SB2015101201
#VU40245 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-2078		 CWE-79 Low
No
No
 - 08.06.2016 SB2016060804
#VU40640 - Improper input validation
CVE-2015-1047		 CWE-20 Medium
No
No
 - 12.10.2015 SB2015101201
#VU42457 - Permissions, Privileges, and Access Controls
CVE-2013-5971		 CWE-264 Medium
No
No
 - 21.10.2013 SB2013102102