Known Vulnerabilities for Vcenter Server Appliance by Vmware
Listed below are 10 of the newest known vulnerabilities associated with "Vcenter Server Appliance" by "Vmware".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2014-8371 | VMware vCenter Server Appliance (vCSA) 5.5 before Update 2, 5.1 before Update 3, and 5.0 before Update 3c does not properly v... | 4.3 - MEDIUM | 2014-12-08 | 2018-10-09 |
| CVE-2014-4258 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remo... | 6.5 - MEDIUM | 2014-07-17 | 2022-07-18 |
| CVE-2014-4241 | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0 allows re... | 4.3 - MEDIUM | 2014-07-17 | 2018-10-09 |
| CVE-2014-3797 | Cross-site scripting (XSS) vulnerability in VMware vCenter Server Appliance (vCSA) 5.1 before Update 3 allows remote attacker... | 4.3 - MEDIUM | 2014-12-08 | 2018-10-09 |
| CVE-2014-3790 | Ruby vSphere Console (RVC) in VMware vCenter Server Appliance allows remote authenticated users to execute arbitrary commands... | 9 - HIGH | 2014-06-01 | 2014-06-21 |
| CVE-2013-3107 | VMware vCenter Server 5.1 before Update 1, when anonymous LDAP binding for Active Directory is enabled, allows remote attacke... | 4.3 - MEDIUM | 2013-05-01 | 2013-05-01 |
| CVE-2013-3080 | VMware vCenter Server Appliance (vCSA) 5.1 before Update 1 allows remote authenticated users to create or overwrite arbitrary... | 9 - HIGH | 2013-05-01 | 2013-05-01 |
| CVE-2013-3079 | VMware vCenter Server Appliance (vCSA) 5.1 before Update 1 allows remote authenticated users to execute arbitrary programs wi... | 9 - HIGH | 2013-05-01 | 2013-05-01 |
| CVE-2013-1659 | VMware vCenter Server 4.0 before Update 4b, 5.0 before Update 2, and 5.1 before 5.1.0b; VMware ESXi 3.5 through 5.1; and VMwa... | 7.6 - HIGH | 2013-02-22 | 2013-02-25 |
| CVE-2012-6324 | Directory traversal vulnerability in VMware vCenter Server Appliance (vCSA) 5.0 before Update 2 and 5.1 before Patch 1 allows... | 4 - MEDIUM | 2012-12-21 | 2018-12-06 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Vmware | Vcenter Server Appliance | 5.1 | All | All | All |
| Application | Vmware | Vcenter Server Appliance | 5.1 | update_1 | All | All |
| Application | Vmware | Vcenter Server Appliance | 5.0 | All | All | All |
| Application | Vmware | Vcenter Server Appliance | 5.0 | update_1 | All | All |
| Application | Vmware | Vcenter Server Appliance | 5.0 | update_2 | All | All |
| Application | Vmware | Vcenter Server Appliance | 5.0 | update1 | All | All |
| Application | Vmware | Vcenter Server Appliance | 5.0 | update1a | All | All |