GCVE - cpe:2.3:a:vmware:vcenter_server:5.5:1:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:vmware:vcenter_server:5.5:1:*:*:*:*:*:*

part: a version: 5.5 update: 1

Vendor	Vmware (`7bb62c7c-2241-5a0b-8dbc-5f13251fb24e`)
Product	Vcenter Server (`07ee07f5-6760-56ae-89f5-9d9572de30b1`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-4928`	vulnerable	2026-06-08 05:09:38.487244	Details available The flash-based vSphere Web Client (6.0 prior to 6.0 U3c and 5.5 prior to 5.5 U3f) i.e. not the new HTML5-based vSphere Client, contains SSRF and CRLF injection issues due to improper neutralization of URLs. An attacker may exploit these issues by sending a POST request with modified headers towards internal services leading to information disclosure. Published: 2017-11-17T14:00:00.000Z Updated: 2024-09-17T03:48:41.110Z Open on db.gcve.eu Reference links https://www.vmware.com/security/advisories/VMSA-2017-0017.html http://www.securitytracker.com/id/1039759 http://www.securityfocus.com/bid/101785	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-7459`	vulnerable	2026-06-08 05:08:12.692008	Details available VMware vCenter Server 5.5 before U3e and 6.0 before U2a allows remote authenticated users to read arbitrary files via a (1) Log Browser, (2) Distributed Switch setup, or (3) Content Library XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Published: 2016-12-29T09:02:00.000Z Updated: 2024-08-06T01:57:47.651Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/94486 http://www.securitytracker.com/id/1037329 http://www.vmware.com/security/advisories/VMSA-2016-0022.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-6932`	vulnerable	2026-06-08 05:06:59.883485	Details available VMware vCenter Server 5.5 before u3 and 6.0 before u1 does not verify X.509 certificates from TLS LDAP servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Published: 2015-09-18T22:00:00.000Z Updated: 2024-08-06T07:36:34.381Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1033582 http://www.vmware.com/security/advisories/VMSA-2015-0006.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.