RSS   Podatności dla 'Vrealize log insight'   RSS

2021-10-13
 
CVE-2021-22035

CWE-74
 
 
VMware vRealize Log Insight (8.x prior to 8.6) contains a CSV(Comma Separated Value) injection vulnerability in interactive analytics export function. An authenticated malicious actor with non-administrative privileges may be able to embed untrusted data prior to exporting a CSV sheet through Log Insight which could be executed in user's environment.

 
2021-08-30
 
CVE-2021-22021

CWE-79
 
 
VMware vRealize Log Insight (8.x prior to 8.4) contains a Cross Site Scripting (XSS) vulnerability due to improper user input validation. An attacker with user privileges may be able to inject a malicious payload via the Log Insight UI which would be executed when the victim accesses the shared dashboard link.

 
2020-04-15
 
CVE-2020-3954

CWE-601
 
 
Open Redirect vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation.

 
 
CVE-2020-3953

CWE-79
 
 
Cross Site Scripting (XSS) vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation.

 
2018-11-13
 
CVE-2018-6980

CWE-863
 
 
VMware vRealize Log Insight (4.7.x before 4.7.1 and 4.6.x before 4.6.2) contains a vulnerability due to improper authorization in the user registration method. Successful exploitation of this issue may allow Admin users with view only permission to perform certain administrative functions which they are not allowed to perform.

 
2016-08-30
 
CVE-2016-5332

 
 
Directory traversal vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.6.0 allows remote attackers to read arbitrary files via unspecified vectors.

 
2016-07-02
 
CVE-2016-2082

 
 
Cross-site request forgery (CSRF) vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.3.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

 
 
CVE-2016-2081

 
 
Cross-site scripting (XSS) vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

 

 >>> Vendor: Vmware 130 Produkty
Workstation
Gsx server
Esx server
ACE
Player
Server
Infrastructure
Virtualcenter
Vmware workstation
Vmware player
Vmware server
ESXI
ESX
Ace 2
Fusion
Vmware player 2
Vmware ace
Vmware esx
Vmware esxi
Movie decoder
Vmware virtualcenter
Studio
Lab manager
Stage manager
Vcenter
Vcenter lab manager
Vcenter stage manager
VMRC
Vix api
View manager
Tc server
Vcenter server
Springsource spring security
Open-vm-tools
Virtual infrastructure client
Springsource spring framework
AMS
Vcenter update manager
Zimbra desktop
Vcenter chargeback manager
VIEW
Vsphere
Vcenter orchestrator
Vshield manager
VMA
Vcenter operations
Capacityiq
Ovf tool
Vcenter server appliance
Hyperic hq
Vi-client
Vsphere client
Vcloud director
Tools
Vm-support
NSX
Vcloud networking and security
Airwatch
Vcloud automation center
Vsphere data protection
Horizon client
Horizon view client
Vrealize orchestrator
Vrealize business
Vrealize automation
Vcloud automation identity appliance
Vrealize log insight
Nsx edge
Vcloud networking and security edge
Workstation player
Workstation pro
Photon os
Identity manger
Fusion pro
Vrealize operations
Horizon view
Airwatch inbox
Airwatch agent
Horizon daas
Unified access gateway
Harbor
Xenon
Vsphere esxi
Workspace one
Intelligent hub
Horizon
Workspace one boxer
Workspace one content
Workspace one intelligent hub
Workspace one notebook
Workspace one people
Workspace one piv-d manager
Workspace one sdk
Workspace one sdk \(objective-c\)
Workspace one web
Spring cloud config
Tanzu application service for vms
Installbuilder
Cloud foundation
Gemfire
Zobacz wszystkie produkty dla producenta Vmware

Copyright 2022, cxsecurity.com

 

Back to Top