VMware vRealize Log Insight
6 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-31655 | VMware vRealize Log Insight prior to 8.8.2 | VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improper input sanitizatio | MEDIUM 5.4 | 0.4 % | ||
| CVE-2022-31654 | VMware vRealize Log Insight prior to 8.8.2 | VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improper input sanitizatio | MEDIUM 5.4 | 0.4 % | ||
| CVE-2021-22035 | VMware vRealize Log Insight (8.x prior to 8.6) | VMware vRealize Log Insight (8.x prior to 8.6) contains a CSV(Comma Separated Value) injection vulnerability in interactive analytics export | MEDIUM 4.3 | 0.6 % | ||
| CVE-2021-22021 | VMware vRealize Log Insight (8.x prior to 8.4) | VMware vRealize Log Insight (8.x prior to 8.4) contains a Cross Site Scripting (XSS) vulnerability due to improper user input validation. An | MEDIUM 5.4 | 0.5 % | ||
| CVE-2020-3953 | VMware vRealize Log Insight prior to 8.1.0 | Cross Site Scripting (XSS) vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation. | MEDIUM 4.8 | 0.7 % | ||
| CVE-2020-3954 | VMware vRealize Log Insight prior to 8.1.0 | Open Redirect vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation. | MEDIUM 6.1 | 0.8 % |