VMware vCenter Server 5.5 Update 2
Approved changes feed: RSS · Atom
cpe:2.3:a:vmware:vcenter_server:5.5:2:*:*:*:*:*:*
part: a version: 5.5 update: 2
| Vendor | Vmware (7bb62c7c-2241-5a0b-8dbc-5f13251fb24e) |
|---|---|
| Product | Vcenter Server (07ee07f5-6760-56ae-89f5-9d9572de30b1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-4928 |
vulnerable | 2026-06-08 05:09:38.489425 |
Details available
The flash-based vSphere Web Client (6.0 prior to 6.0 U3c and 5.5 prior to 5.5 U3f) i.e. not the new HTML5-based vSphere Client, contains SSRF and CRLF injection issues due to improper neutralization of URLs. An attacker may exploit these issues by sending a POST request with modified headers towards internal services leading to information disclosure.
Published: 2017-11-17T14:00:00.000Z
Updated: 2024-09-17T03:48:41.110Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-7459 |
vulnerable | 2026-06-08 05:08:12.692628 |
Details available
VMware vCenter Server 5.5 before U3e and 6.0 before U2a allows remote authenticated users to read arbitrary files via a (1) Log Browser, (2) Distributed Switch setup, or (3) Content Library XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Published: 2016-12-29T09:02:00.000Z
Updated: 2024-08-06T01:57:47.651Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-6932 |
vulnerable | 2026-06-08 05:06:59.885507 |
Details available
VMware vCenter Server 5.5 before u3 and 6.0 before u1 does not verify X.509 certificates from TLS LDAP servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Published: 2015-09-18T22:00:00.000Z
Updated: 2024-08-06T07:36:34.381Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.