Approved changes feed: RSS · Atom

cpe:2.3:a:vmware:vcenter_server:5.1:*:*:*:*:*:*:*

part: a version: 5.1 update: *

VendorVmware (7bb62c7c-2241-5a0b-8dbc-5f13251fb24e)
ProductVcenter Server (07ee07f5-6760-56ae-89f5-9d9572de30b1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-2078 vulnerable 2026-06-08 05:07:32.813231 Details available
Cross-site scripting (XSS) vulnerability in the Web Client in VMware vCenter Server 5.1 before update 3d, 5.5 before update 3d, and 6.0 before update 2 on Windows allows remote attackers to inject arbitrary web script or HTML via the flashvars parameter.
Published: 2016-06-08T14:00:00.000Z
Updated: 2024-08-05T23:17:50.509Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6931 vulnerable 2026-06-08 05:06:59.880367 Details available
Cross-site scripting (XSS) vulnerability in the vSphere Web Client in VMware vCenter Server 5.0 before U3g, 5.1 before U3d, and 5.5 before U2d allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
Published: 2016-07-03T01:00:00.000Z
Updated: 2024-08-06T07:36:34.514Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2342 vulnerable 2026-06-08 05:06:34.867398 Details available
The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 before u1 does not restrict registration of MBeans, which allows remote attackers to execute arbitrary code via the RMI protocol.
Published: 2015-10-12T10:00:00.000Z
Updated: 2024-08-06T05:10:16.151Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1047 vulnerable 2026-06-08 05:06:24.895501 Details available
vpxd in VMware vCenter Server 5.0 before u3e, 5.1 before u3, and 5.5 before u2 allows remote attackers to cause a denial of service via a long heartbeat message.
Published: 2015-10-12T10:00:00.000Z
Updated: 2024-08-06T04:33:20.286Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4241 vulnerable 2026-06-08 05:05:44.458711 Details available
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0 allows remote attackers to affect integrity via vectors related to WLS - Web Services.
Published: 2014-07-17T10:00:00.000Z
Updated: 2024-08-06T11:12:34.052Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.