Approved changes feed: RSS · Atom

cpe:2.3:a:vmware:vcenter_server:5.0:*:*:*:*:*:*:*

part: a version: 5.0 update: *

VendorVmware (7bb62c7c-2241-5a0b-8dbc-5f13251fb24e)
ProductVcenter Server (07ee07f5-6760-56ae-89f5-9d9572de30b1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-7459 vulnerable 2026-06-08 05:08:12.690617 Details available
VMware vCenter Server 5.5 before U3e and 6.0 before U2a allows remote authenticated users to read arbitrary files via a (1) Log Browser, (2) Distributed Switch setup, or (3) Content Library XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Published: 2016-12-29T09:02:00.000Z
Updated: 2024-08-06T01:57:47.651Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2078 vulnerable 2026-06-08 05:07:32.815080 Details available
Cross-site scripting (XSS) vulnerability in the Web Client in VMware vCenter Server 5.1 before update 3d, 5.5 before update 3d, and 6.0 before update 2 on Windows allows remote attackers to inject arbitrary web script or HTML via the flashvars parameter.
Published: 2016-06-08T14:00:00.000Z
Updated: 2024-08-05T23:17:50.509Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6931 vulnerable 2026-06-08 05:06:59.879816 Details available
Cross-site scripting (XSS) vulnerability in the vSphere Web Client in VMware vCenter Server 5.0 before U3g, 5.1 before U3d, and 5.5 before U2d allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
Published: 2016-07-03T01:00:00.000Z
Updated: 2024-08-06T07:36:34.514Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2342 vulnerable 2026-06-08 05:06:34.866787 Details available
The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 before u1 does not restrict registration of MBeans, which allows remote attackers to execute arbitrary code via the RMI protocol.
Published: 2015-10-12T10:00:00.000Z
Updated: 2024-08-06T05:10:16.151Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1047 vulnerable 2026-06-08 05:06:24.894636 Details available
vpxd in VMware vCenter Server 5.0 before u3e, 5.1 before u3, and 5.5 before u2 allows remote attackers to cause a denial of service via a long heartbeat message.
Published: 2015-10-12T10:00:00.000Z
Updated: 2024-08-06T04:33:20.286Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4241 vulnerable 2026-06-08 05:05:44.457920 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5971 vulnerable 2026-06-08 05:04:54.936664 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1659 vulnerable 2026-06-08 05:03:55.368520 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-6326 vulnerable 2026-06-08 05:02:59.908696 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.