VMware vCenter Server 5.5 Update 3a
Approved changes feed: RSS · Atom
cpe:2.3:a:vmware:vcenter_server:5.5:3a:*:*:*:*:*:*
part: a version: 5.5 update: 3a
| Vendor | Vmware (7bb62c7c-2241-5a0b-8dbc-5f13251fb24e) |
|---|---|
| Product | Vcenter Server (07ee07f5-6760-56ae-89f5-9d9572de30b1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-4928 |
vulnerable | 2026-06-08 05:09:38.492300 |
Details available
The flash-based vSphere Web Client (6.0 prior to 6.0 U3c and 5.5 prior to 5.5 U3f) i.e. not the new HTML5-based vSphere Client, contains SSRF and CRLF injection issues due to improper neutralization of URLs. An attacker may exploit these issues by sending a POST request with modified headers towards internal services leading to information disclosure.
Published: 2017-11-17T14:00:00.000Z
Updated: 2024-09-17T03:48:41.110Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-7459 |
vulnerable | 2026-06-08 05:08:12.693294 |
Details available
VMware vCenter Server 5.5 before U3e and 6.0 before U2a allows remote authenticated users to read arbitrary files via a (1) Log Browser, (2) Distributed Switch setup, or (3) Content Library XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Published: 2016-12-29T09:02:00.000Z
Updated: 2024-08-06T01:57:47.651Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-2076 |
vulnerable | 2026-06-08 05:07:32.804549 |
Details available
Client Integration Plugin (CIP) in VMware vCenter Server 5.5 U3a, U3b, and U3c and 6.0 before U2; vCloud Director 5.5.5; and vRealize Automation Identity Appliance 6.2.4 before 6.2.4.1 mishandles session content, which allows remote attackers to hijack sessions via a crafted web site.
Published: 2016-04-15T14:00:00.000Z
Updated: 2024-08-05T23:17:50.500Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.