Known vulnerabilities in vCenter Server - page 4

Vendor: VMware, Inc
Software: vCenter Server
Software CPE: cpe:2.3:a:vmware:vcenter-server:*:*:*:*:*:*:*:*
Website: https://www.vmware.com
Total vulnerabilities: 76
Public exploits: 13
Known exploited (KEV): 12
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting vCenter Server vCenter Server is affected by 76 known vulnerabilities: 7 critical, 12 high, 27 medium, 30 low Critical High Medium Low

Vulnerabilities (76)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU12438 - Improper Authorization
CVE-2015-2342		 CWE-285 High
Available
No
 - 08.05.2018 SB2015100101
#VU9171 - Server-Side Request Forgery (SSRF)
CVE-2017-4928		 CWE-918 Low
No
No
 - 10.11.2017 SB2017111006
#VU9170 - Improper input validation
CVE-2017-4927		 CWE-20 Low
No
No
 - 10.11.2017 SB2017111006
#VU8445 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-4926		 CWE-79 Low
No
No
 - 15.09.2017 SB2017091503
#VU7643 - Untrusted Search Path
CVE-2017-4921		 CWE-426 Low
No
No
 - 01.08.2017 SB2017072701
#VU7642 - Permissions, Privileges, and Access Controls
CVE-2017-4919		 CWE-264 Low
No
No
 - 01.08.2017 SB2017072702
#VU7641 - Exposure of sensitive information to an unauthorized actor
CVE-2017-4923		 CWE-200 Low
No
No
 - 01.08.2017 SB2017072701
#VU7640 - Exposure of sensitive information to an unauthorized actor
CVE-2017-4922		 CWE-200 Low
No
No
 - 01.08.2017 SB2017072701
#VU6303 - Deserialization of Untrusted Data
CVE-2017-5641		 CWE-502 High
No
No
 - 19.04.2017 SB2017041402
SB2018042005
#VU39958 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2016-7459		 CWE-611 Medium
No
No
 - 29.12.2016 SB2015091901
#VU40221 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-6931		 CWE-79 Low
No
No
 - 03.07.2016 SB2015101201
#VU40245 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-2078		 CWE-79 Low
No
No
 - 08.06.2016 SB2016060804
#VU40640 - Improper input validation
CVE-2015-1047		 CWE-20 Medium
No
No
 - 12.10.2015 SB2015101201
#VU40647 - Cryptographic Issues
CVE-2015-6932		 CWE-310 Medium
No
No
 - 19.09.2015 SB2015091901
#VU42457 - Permissions, Privileges, and Access Controls
CVE-2013-5971		 CWE-264 Medium
No
No
 - 21.10.2013 SB2013102102
#VU45317 - Credentials Management
CVE-2010-2928		 CWE-255 Low
No
No
 - 16.02.2011 SB2011021602


Showing elements 61 - 80 out of 76