Known vulnerabilities in vCenter Server 6.0.0

Known vulnerabilities in vCenter Server 6.0.0

Vendor: Broadcom

Software: vCenter Server

Version: 6.0.0

Software CPE: cpe:2.3:a:broadcom:vcenter-server:*:*:*:*:*:*:*:*

Website: https://www.broadcom.com/

Total vulnerabilities: 13

Public exploits: 2

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Vulnerabilities (13)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU58816 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44228	CWE-94	Critical	Public exploit available	Exploited	-	10.12.2021	SB2021121003 SB2021121101 SB2021121201 and 338 more
#VU21149 - Cleartext Storage of Sensitive Information CVE-2019-5534	CWE-312	Low	No	No	6.0 U3j, 6.5 U3, 6.7 U3	17.09.2019	SB2019091707
#VU21148 - Cleartext Storage of Sensitive Information CVE-2019-5532	CWE-312	Low	No	No	6.0 U3j, 6.5 U3, 6.7 U3	17.09.2019	SB2019091707
#VU14412 - Exposure of sensitive information to an unauthorized actor CVE-2018-3646	CWE-200	Low	No	No	5.5u3j, 6.0u3h, 6.5u2c, 6.7.0d	15.08.2018	SB2018081502 SB2018081505 SB2018081508 and 36 more
#VU14411 - Exposure of sensitive information to an unauthorized actor CVE-2018-3620	CWE-200	Low	No	No	-	15.08.2018	SB2018081502 SB2018081506 SB2018081508 and 35 more
#VU12914 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2018-3640	CWE-362	Low	No	No	-	22.05.2018	SB2018052201 SB2018052802 SB2018070908 and 8 more
#VU12911 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2018-3639	CWE-362	Low	No	No	-	22.05.2018	SB2018052201 SB2018052207 SB2018052208 and 142 more
#VU12438 - Improper Authorization CVE-2015-2342	CWE-285	High	Public exploit available	No	-	08.05.2018	SB2015100101
#VU9171 - Server-Side Request Forgery (SSRF) CVE-2017-4928	CWE-918	Low	No	No	-	10.11.2017	SB2017111006
#VU9170 - Improper input validation CVE-2017-4927	CWE-20	Low	No	No	-	10.11.2017	SB2017111006
#VU6303 - Deserialization of Untrusted Data CVE-2017-5641	CWE-502	High	No	No	-	19.04.2017	SB2017041402 SB2018042005
#VU39958 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2016-7459	CWE-611	Medium	No	No	-	29.12.2016	SB2015091901
#VU40647 - Cryptographic Issues CVE-2015-6932	CWE-310	Medium	No	No	-	19.09.2015	SB2015091901