Known vulnerabilities in vSphere Data Protection 5.8.1

Vendor: Broadcom

Software: vSphere Data Protection

Version: 5.8.1

Software CPE: cpe:2.3:a:broadcom:vsphere_data_protection:*:*:*:*:*:*:*:*

Website: https://www.broadcom.com/

Total vulnerabilities: 4

Public exploits: 1

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Vulnerabilities (4)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU9827 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2017-15550	CWE-22	Medium	No	No	-	02.01.2018	SB2018010204
#VU9826 - Unrestricted Upload of File with Dangerous Type CVE-2017-15549	CWE-434	Medium	No	No	-	02.01.2018	SB2018010204
#VU9825 - Improper Authentication CVE-2017-15548	CWE-287	High	No	No	-	02.01.2018	SB2018010204
#VU39957 - Credentials Management CVE-2016-7456	CWE-255	High	Public exploit available	No	-	29.12.2016	SB2016122904