Vrealize Orchestrator (Vmware) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2023-02-22. Vendor: Vmware.

CVEs of Vrealize Orchestrator

• CVE-2023-20855 - CVSS 8.8 (high), 2023-02-22: VMware vRealize Orchestrator contains an XML External Entity (XXE) vulnerability. A malicious actor, with non-administrative access to vRealize Orchestrator,…
• CVE-2021-22036 - CVSS 6.5 (medium), 2021-10-13: VMware vRealize Orchestrator ((8.x prior to 8.6) contains an open redirect vulnerability due to improper path handling. A malicious actor may be able to…
• CVE-2015-6934 - CVSS 7.3 (high), 2015-12-21: Serialized-object interfaces in VMware vRealize Orchestrator 6.x, vCenter Orchestrator 5.x, vRealize Operations 6.x, vCenter Operations 5.x, and vCenter…