Approved changes feed: RSS · Atom

cpe:2.3:a:vmware:vcenter_server:6.0:1b:*:*:*:*:*:*

part: a version: 6.0 update: 1b

VendorVmware (7bb62c7c-2241-5a0b-8dbc-5f13251fb24e)
ProductVcenter Server (07ee07f5-6760-56ae-89f5-9d9572de30b1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-4928 vulnerable 2026-06-08 05:09:38.496016 Details available
The flash-based vSphere Web Client (6.0 prior to 6.0 U3c and 5.5 prior to 5.5 U3f) i.e. not the new HTML5-based vSphere Client, contains SSRF and CRLF injection issues due to improper neutralization of URLs. An attacker may exploit these issues by sending a POST request with modified headers towards internal services leading to information disclosure.
Published: 2017-11-17T14:00:00.000Z
Updated: 2024-09-17T03:48:41.110Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-7459 vulnerable 2026-06-08 05:08:12.695325 Details available
VMware vCenter Server 5.5 before U3e and 6.0 before U2a allows remote authenticated users to read arbitrary files via a (1) Log Browser, (2) Distributed Switch setup, or (3) Content Library XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Published: 2016-12-29T09:02:00.000Z
Updated: 2024-08-06T01:57:47.651Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.