VMware vCenter Server 5.5
Approved changes feed: RSS · Atom
cpe:2.3:a:vmware:vcenter_server:5.5:*:*:*:*:*:*:*
part: a version: 5.5 update: *
| Vendor | Vmware (7bb62c7c-2241-5a0b-8dbc-5f13251fb24e) |
|---|---|
| Product | Vcenter Server (07ee07f5-6760-56ae-89f5-9d9572de30b1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-4928 |
vulnerable | 2026-06-08 05:09:38.486150 |
Details available
The flash-based vSphere Web Client (6.0 prior to 6.0 U3c and 5.5 prior to 5.5 U3f) i.e. not the new HTML5-based vSphere Client, contains SSRF and CRLF injection issues due to improper neutralization of URLs. An attacker may exploit these issues by sending a POST request with modified headers towards internal services leading to information disclosure.
Published: 2017-11-17T14:00:00.000Z
Updated: 2024-09-17T03:48:41.110Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-4919 |
vulnerable | 2026-06-08 05:09:38.464932 |
Details available
VMware vCenter Server 5.5, 6.0, 6.5 allows vSphere users with certain, limited vSphere privileges to use the VIX API to access Guest Operating Systems without the need to authenticate.
Published: 2017-07-28T22:00:00.000Z
Updated: 2024-09-16T16:29:02.295Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-7459 |
vulnerable | 2026-06-08 05:08:12.691477 |
Details available
VMware vCenter Server 5.5 before U3e and 6.0 before U2a allows remote authenticated users to read arbitrary files via a (1) Log Browser, (2) Distributed Switch setup, or (3) Content Library XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Published: 2016-12-29T09:02:00.000Z
Updated: 2024-08-06T01:57:47.651Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-2078 |
vulnerable | 2026-06-08 05:07:32.813851 |
Details available
Cross-site scripting (XSS) vulnerability in the Web Client in VMware vCenter Server 5.1 before update 3d, 5.5 before update 3d, and 6.0 before update 2 on Windows allows remote attackers to inject arbitrary web script or HTML via the flashvars parameter.
Published: 2016-06-08T14:00:00.000Z
Updated: 2024-08-05T23:17:50.509Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-6931 |
vulnerable | 2026-06-08 05:06:59.880881 |
Details available
Cross-site scripting (XSS) vulnerability in the vSphere Web Client in VMware vCenter Server 5.0 before U3g, 5.1 before U3d, and 5.5 before U2d allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
Published: 2016-07-03T01:00:00.000Z
Updated: 2024-08-06T07:36:34.514Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-2342 |
vulnerable | 2026-06-08 05:06:34.867934 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-1047 |
vulnerable | 2026-06-08 05:06:24.896368 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-4241 |
vulnerable | 2026-06-08 05:05:44.459645 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.