VMware vRealize Operations
13 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-31673 | VMware vRealize Operations (8.x prior to 8.6.4) | VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can create | HIGH 8.8 | 1.8 % | ||
| CVE-2022-31674 | VMware vRealize Operations (8.x prior to 8.6.4) | VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can access | MEDIUM 4.3 | 0.7 % | ||
| CVE-2022-31675 | VMware vRealize Operations (8.x prior to 8.6.4) | VMware vRealize Operations contains an authentication bypass vulnerability. An unauthenticated malicious actor with network access may be ab | HIGH 7.5 | 0.9 % | ||
| CVE-2022-31672 | VMware vRealize Operations (8.x prior to 8.6.4) | VMware vRealize Operations contains a privilege escalation vulnerability. A malicious actor with administrative network access can escalate | HIGH 7.2 | 0.7 % | ||
| CVE-2021-22033 | Releases prior to VMware vRealize Operations 8.6 | Releases prior to VMware vRealize Operations 8.6 contain a Server Side Request Forgery (SSRF) vulnerability. | LOW 2.7 | 0.6 % | ||
| CVE-2021-22025 | VMware vRealize Operations (8.x prior to 8.5) | The vRealize Operations Manager API (8.x prior to 8.5) contains a broken access control vulnerability leading to unauthenticated API access. | HIGH 7.5 | 0.8 % | ||
| CVE-2021-22027 | VMware vRealize Operations (8.x prior to 8.5) | The vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in an end point. An unauthenticated malicious | HIGH 7.5 | 1.2 % | ||
| CVE-2021-22026 | VMware vRealize Operations (8.x prior to 8.5) | The vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in an end point. An unauthenticated malicious | HIGH 7.5 | 1.1 % | ||
| CVE-2021-22024 | VMware vRealize Operations (8.x prior to 8.5) | The vRealize Operations Manager API (8.x prior to 8.5) contains an arbitrary log-file read vulnerability. An unauthenticated malicious actor | HIGH 7.5 | 1.0 % | ||
| CVE-2021-22023 | VMware vRealize Operations (8.x prior to 8.5) | The vRealize Operations Manager API (8.x prior to 8.5) has insecure object reference vulnerability. A malicious actor with administrative ac | HIGH 7.2 | 1.0 % | ||
| CVE-2021-22022 | VMware vRealize Operations (8.x prior to 8.5) | The vRealize Operations Manager API (8.x prior to 8.5) contains an arbitrary file read vulnerability. A malicious actor with administrative | MEDIUM 4.9 | 1.1 % | ||
| CVE-2021-21975 | VMware vRealize Operations prior to 8.4 | Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor with network access | CRITICAL 9.8 | 78 % | KEV | |
| CVE-2021-21983 | VMware vRealize Operations prior to 8.4 | Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authenticated malicious act | MEDIUM 6.5 | 69 % |