Approved changes feed: RSS · Atom

cpe:2.3:a:vmware:vcenter:4.0:update_2:*:*:*:*:*:*

part: a version: 4.0 update: update_2

VendorVmware (7bb62c7c-2241-5a0b-8dbc-5f13251fb24e)
ProductVcenter (9f2341ec-bbcc-55fc-bfdc-2d21ad8e9e9c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/vmware-archive/vmware-vcenter purl2cpe 2026-06-01 10:12:22.174357

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-1789 vulnerable 2026-06-08 04:58:02.172914 Details available
The self-extracting installer in the vSphere Client Installer package in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1, VMware ESXi 4.x before 4.1 Update 1, and VMware ESX 4.x before 4.1 Update 1 does not have a digital signature, which might make it easier for remote attackers to spoof the software distribution via a Trojan horse installer.
Published: 2011-05-09T22:00:00.000Z
Updated: 2024-09-16T16:28:59.357Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1788 vulnerable 2026-06-08 04:58:02.171821 Details available
vCenter Server in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1 allows local users to discover the SOAP session ID via unspecified vectors.
Published: 2011-05-09T22:00:00.000Z
Updated: 2024-08-06T22:37:25.887Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0426 vulnerable 2026-06-08 04:56:37.041245 Details available
Directory traversal vulnerability in vCenter Server in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1, and VMware VirtualCenter 2.5 before Update 6a, allows remote attackers to read arbitrary files via unspecified vectors.
Published: 2011-05-09T22:00:00.000Z
Updated: 2024-09-17T01:05:33.111Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.