Approved changes feed: RSS · Atom

cpe:2.3:a:vmware:vrealize_operations:*:*:*:*:*:horizon:*:*

part: a version: * update: *

VendorVmware (7bb62c7c-2241-5a0b-8dbc-5f13251fb24e)
ProductVrealize Operations (62a0a111-5622-5c7e-a5dd-8ff2ee5937c6)
Edition*
Language*
Software edition*
Target softwarehorizon
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-3945 vulnerable 2026-06-08 05:25:57.954387 Details available
vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) contains an information disclosure vulnerability due to incorrect pairing implementation between the vRealize Operations for Horizon Adapter and Horizon View. An unauthenticated remote attacker who has network access to vRealize Operations, with the Horizon Adapter running, may obtain sensitive information
Published: 2020-02-19T20:03:54.000Z
Updated: 2024-08-04T07:52:20.842Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3944 vulnerable 2026-06-08 05:25:57.954036 Details available
vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) has an improper trust store configuration leading to authentication bypass. An unauthenticated remote attacker who has network access to vRealize Operations, with the Horizon Adapter running, may be able to bypass Adapter authentication.
Published: 2020-02-19T20:03:57.000Z
Updated: 2024-08-04T07:52:20.339Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3943 vulnerable 2026-06-08 05:25:57.953605 Details available
vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) uses a JMX RMI service which is not securely configured. An unauthenticated remote attacker who has network access to vRealize Operations, with the Horizon Adapter running, may be able to execute arbitrary code in vRealize Operations.
Published: 2020-02-19T20:04:00.000Z
Updated: 2024-08-04T07:52:20.381Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.