Known vulnerabilities in VMware vRealize Operations Manager (vROps) 7.0

Vendor: Broadcom
Software: VMware vRealize Operations Manager (vROps)
Version: 7.0
Software CPE: cpe:2.3:a:broadcom:vrealize-operations:*:*:*:*:*:*:*:*
Website: https://www.broadcom.com/
Total vulnerabilities: 2
Public exploits: 2
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting VMware vRealize Operations Manager (vROps) version 7.0 VMware vRealize Operations Manager (vROps) 7.0 is affected by 2 vulnerabilities: 1 critical, 1 medium Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU27495 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-11652		 CWE-22 Medium
Public exploit available
Exploited
 - 04.05.2020 SB2020050410
SB2020050417
SB2020050506
and 10 more
#VU27494 - Improper Authentication
CVE-2020-11651		 CWE-287 Critical
Public exploit available
Exploited
 - 04.05.2020 SB2020050410
SB2020050417
SB2020050506
and 10 more