Known vulnerabilities in vCenter Server 5.5.0

Known vulnerabilities in vCenter Server 5.5.0

Vendor: Broadcom

Software: vCenter Server

Version: 5.5.0

Software CPE: cpe:2.3:a:broadcom:vcenter-server:*:*:*:*:*:*:*:*

Website: https://www.broadcom.com/

Total vulnerabilities: 10

Public exploits: 1

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Vulnerabilities (10)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU14412 - Exposure of sensitive information to an unauthorized actor CVE-2018-3646	CWE-200	Low	No	No	5.5u3j, 6.0u3h, 6.5u2c, 6.7.0d	15.08.2018	SB2018081502 SB2018081505 SB2018081508 and 36 more
#VU14411 - Exposure of sensitive information to an unauthorized actor CVE-2018-3620	CWE-200	Low	No	No	-	15.08.2018	SB2018081502 SB2018081506 SB2018081508 and 35 more
#VU12914 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2018-3640	CWE-362	Low	No	No	-	22.05.2018	SB2018052201 SB2018052802 SB2018070908 and 8 more
#VU12911 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2018-3639	CWE-362	Low	No	No	-	22.05.2018	SB2018052201 SB2018052207 SB2018052208 and 142 more
#VU12438 - Improper Authorization CVE-2015-2342	CWE-285	High	Public exploit available	No	-	08.05.2018	SB2015100101
#VU9171 - Server-Side Request Forgery (SSRF) CVE-2017-4928	CWE-918	Low	No	No	-	10.11.2017	SB2017111006
#VU39958 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2016-7459	CWE-611	Medium	No	No	-	29.12.2016	SB2015091901
#VU40221 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2015-6931	CWE-79	Low	No	No	-	03.07.2016	SB2015101201
#VU40640 - Improper input validation CVE-2015-1047	CWE-20	Medium	No	No	-	12.10.2015	SB2015101201
#VU40647 - Cryptographic Issues CVE-2015-6932	CWE-310	Medium	No	No	-	19.09.2015	SB2015091901