Approved changes feed: RSS · Atom

cpe:2.3:a:vmware:virtualcenter:2.0.2:*:*:*:*:*:*:*

part: a version: 2.0.2 update: *

VendorVmware (7bb62c7c-2241-5a0b-8dbc-5f13251fb24e)
ProductVirtualcenter (e9aac473-919c-51f7-8c81-48562e828f0d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-1137 vulnerable 2026-06-08 04:54:05.392093 Details available
Cross-site scripting (XSS) vulnerability in WebAccess in VMware VirtualCenter 2.0.2 and 2.5 and VMware ESX 3.0.3 and 3.5, and the Server Console in VMware Server 1.0, allows remote attackers to inject arbitrary web script or HTML via the name of a virtual machine.
Published: 2010-04-01T19:00:00.000Z
Updated: 2024-08-07T01:14:05.797Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0686 vulnerable 2026-06-08 04:52:03.996911 Details available
WebAccess in VMware VirtualCenter 2.0.2 and 2.5, VMware Server 2.0, and VMware ESX 3.0.3 and 3.5 allows remote attackers to leverage proxy-server functionality to spoof the origin of requests via unspecified vectors, related to a "URL forwarding vulnerability."
Published: 2010-04-01T19:00:00.000Z
Updated: 2024-08-07T00:59:38.333Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2277 vulnerable 2026-06-08 04:51:27.476119 Details available
Cross-site scripting (XSS) vulnerability in WebAccess in VMware VirtualCenter 2.0.2 and 2.5 and VMware ESX 3.0.3 and 3.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to "context data."
Published: 2010-04-01T19:00:00.000Z
Updated: 2024-08-07T05:44:55.874Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1072 vulnerable 2026-06-08 04:51:12.944788 Details available
nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows local users to create device nodes, as demonstrated on a filesystem that has been exported with the root_squash option.
Published: 2009-03-25T01:00:00.000Z
Updated: 2024-08-07T04:57:17.810Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0778 vulnerable 2026-06-08 04:51:11.301617 Details available
The icmp_send function in net/ipv4/icmp.c in the Linux kernel before 2.6.25, when configured as a router with a REJECT route, does not properly manage the Protocol Independent Destination Cache (aka DST) in some situations involving transmission of an ICMP Host Unreachable message, which allows remote attackers to cause a denial of service (connectivity outage) by sending a large series of packets to many destination IP addresses within this REJECT route, related to an "rt_cache leak."
Published: 2009-03-12T15:00:00.000Z
Updated: 2024-08-07T04:48:52.114Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4278 vulnerable 2026-06-08 04:50:38.390707 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3514 vulnerable 2026-06-08 04:50:35.117320 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.