Vcenter Server Appliance (Vmware) - vulnerabilities (CVEs)
14 CVEs, 0 in the last 30 days, 15 known versions, newest CVE from 2014-12-08. Vendor: Vmware.
CVEs of Vcenter Server Appliance
- CVE-2014-8371 - CVSS 4.3 (medium), 2014-12-08: VMware vCenter Server Appliance (vCSA) 5.5 before Update 2, 5.1 before Update 3, and 5.0 before Update 3c does not properly validate certificates when…
- CVE-2014-3797 - CVSS 4.3 (medium), 2014-12-08: Cross-site scripting (XSS) vulnerability in VMware vCenter Server Appliance (vCSA) 5.1 before Update 3 allows remote attackers to inject arbitrary web script…
- CVE-2014-7169 - CVSS 9.8 (critical), 2014-09-25: GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows…
- CVE-2014-6271 - CVSS 9.8 (critical), 2014-09-24: GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute…
- CVE-2014-4258 - CVSS 6.5 (medium), 2014-07-17: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote authenticated users to affect…
- CVE-2014-4241 - CVSS 4.3 (medium), 2014-07-17: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0 allows remote attackers to affect…
- CVE-2014-3790 - CVSS 9 (critical), 2014-06-01: Ruby vSphere Console (RVC) in VMware vCenter Server Appliance allows remote authenticated users to execute arbitrary commands as root by escaping from a…
- CVE-2013-3079 - CVSS 9 (critical), 2013-05-01: VMware vCenter Server Appliance (vCSA) 5.1 before Update 1 allows remote authenticated users to execute arbitrary programs with root privileges by leveraging…
- CVE-2013-3107 - CVSS 4.3 (medium), 2013-05-01: VMware vCenter Server 5.1 before Update 1, when anonymous LDAP binding for Active Directory is enabled, allows remote attackers to bypass authentication by…
- CVE-2013-3080 - CVSS 9 (critical), 2013-05-01: VMware vCenter Server Appliance (vCSA) 5.1 before Update 1 allows remote authenticated users to create or overwrite arbitrary files, and consequently execute…
- CVE-2013-1659 - CVSS 7.6 (high), 2013-02-22: VMware vCenter Server 4.0 before Update 4b, 5.0 before Update 2, and 5.1 before 5.1.0b; VMware ESXi 3.5 through 5.1; and VMware ESX 3.5 through 4.1 do not…
- CVE-2012-6326 - CVSS 7.8 (high), 2013-02-22: VMware vCenter Server 4.1 before Update 3 and 5.0 before Update 2, and vCSA 5.0 before Update 2, allows remote attackers to cause a denial of service (disk…
- CVE-2012-6325 - CVSS 4 (medium), 2012-12-21: VMware vCenter Server Appliance (vCSA) 5.0 before Update 2 does not properly parse XML documents, which allows remote authenticated users to read arbitrary…
- CVE-2012-6324 - CVSS 4 (medium), 2012-12-21: Directory traversal vulnerability in VMware vCenter Server Appliance (vCSA) 5.0 before Update 2 and 5.1 before Patch 1 allows remote authenticated users to…
