vmware vcenter server 6.7 vulnerabilities and exploits

(subscribe to this query)

7.7

CVSSv3

VMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j) contains an information disclosure vulnerability where Virtual Machines deployed from an OVF could expose login information via the virtual machine's vAppConfig properties. A...

Vmware Vcenter Server 6.0 Vmware Vcenter Server 6.7 Vmware Vcenter Server 6.5

9.8

CVSSv3

The vSphere Web Client (FLEX/Flash) contains an SSRF (Server Side Request Forgery) vulnerability in the vSAN Web Client (vSAN UI) plug-in. A malicious actor with network access to port 443 on vCenter Server may exploit this issue by accessing a URL request outside of vCenter...

Vmware Vcenter Server 6.5 Vmware Vcenter Server 6.7 Vmware Vcenter Server 7.0

7.7

CVSSv3

VMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j) contains an information disclosure vulnerability due to the logging of credentials in plain-text for virtual machines deployed through OVF. A malicious user with access to the log files...

Vmware Vcenter Server 6.0 Vmware Vcenter Server 6.7 Vmware Vcenter Server 6.5

9.8

CVSSv3

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code on vCenter Server by uploading a specially crafted file....

Vmware Cloud Foundation Vmware Vcenter Server 6.5 Vmware Vcenter Server 6.7 Vmware Vcenter Server 7.032 Github repositories available8 Articles available

7.8

CVSSv3

The vCenter Server contains a local privilege escalation vulnerability due to the way it handles session tokens. A malicious actor with non-administrative user access on vCenter Server host may exploit this issue to escalate privileges to Administrator on the vSphere Client...

Vmware Vcenter Server 6.5 Vmware Vcenter Server 6.7 Vmware Vcenter Server 7.0 Vmware Cloud Foundation

5.5

The vCenter Server contains an information disclosure vulnerability due to the logging of credentials in plaintext. A malicious actor with access to a workstation that invoked a vCenter Server Appliance ISO operation (Install/Upgrade/Migrate/Restore) can access plaintext...

Vmware Vcenter Server 6.5 Vmware Vcenter Server 6.7 Vmware Vcenter Server 7.0 Vmware Cloud Foundation1 Github repository available1 Article available

5.4

CVSSv3

VMware vSphere ESXi (6.7 prior to ESXi670-201810101-SG, 6.5 prior to ESXi650-201811102-SG, and 6.0 prior to ESXi600-201807103-SG) and VMware vCenter Server (6.7 prior to 6.7 U1b, 6.5 prior to 6.5 U2b, and 6.0 prior to 6.0 U3j) contain an information disclosure vulnerability in...

Vmware Vsphere Esxi 6.7 Vmware Esxi 6.7 Vmware Vsphere Esxi 6.5 Vmware Vsphere Esxi 6.0 Vmware Vcenter Server 6.0 Vmware Vcenter Server 6.7 Vmware Vcenter Server 6.5

5.9

CVSSv3

Sensitive information disclosure vulnerability resulting from a lack of certificate validation during the File-Based Backup and Restore operations of VMware vCenter Server Appliance (6.7 before 6.7u3a and 6.5 before 6.5u3d) may allow a malicious actor to intercept sensitive data...

Vmware Vcenter Server 6.5 Vmware Vcenter Server 6.7

7.4

CVSSv3

VMware vCenter Server (6.7 before 6.7u3, 6.6 before 6.5u3k) contains a session hijack vulnerability in the vCenter Server Appliance Management Interface update function due to a lack of certificate validation. A malicious actor with network positioning between vCenter Server and...

Vmware Cloud Foundation Vmware Vcenter Server 6.5 Vmware Vcenter Server 6.71 Article available

9.8

CVSSv3

The vSphere Client (HTML5) contains a vulnerability in a vSphere authentication mechanism for the Virtual SAN Health Check, Site Recovery, vSphere Lifecycle Manager, and VMware Cloud Director Availability plug-ins. A malicious actor with network access to port 443 on vCenter...

Vmware Vcenter Server 6.5 Vmware Vcenter Server 6.7 Vmware Vcenter Server 7.0 Vmware Cloud Foundation2 Articles available

Get Started

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook