VMware Security Advisory 2016-0023 - VMware ESXi updates address a cross-site scripting issue. 2. Relevant Releases VMware vSphere Hypervisor (ESXi) 3. Problem Description a. Host Client stored cross-site scripting issue The ESXi Host Client contains a vulnerability that may allow for stored cross-site scripting (XSS). The issue can be introduced by an attacker that has permission to manage virtual machines through ESXi Host Client or by tricking the vSphere administrator to import a specially crafted VM. The issue may be triggered on the system from where ESXi Host Client is used to manage the specially crafted VM.
6a9db0c674d184c690eb159339fcb5e8VMware Security Advisory 2016-0022 - VMware vCenter Server, vSphere Client, and vRealize Automation updates address information disclosure vulnerabilities.
476130603dba190123ac984ecc43f84cVMware Security Advisory 2016-0021 - VMware product updates address partial information disclosure vulnerability.
2bc5a26c205bfce3254bf00a5eca524bVMware Security Advisory 2016-0020 - vRealize Operations REST API deserialization vulnerability vRealize Operations contains a deserialization vulnerability in its REST API implementation. This issue may result in a Denial of Service as it allows for writing of files with arbitrary content and moving existing files into certain folders. The name format of the destination files is predefined and their names cannot be chosen. Overwriting files is not feasible.
1f06521b93fa6beffee9a2bda065bce6VMware Security Advisory 2016-0019 - VMware Workstation and Fusion updates address a critical out-of-bounds memory access vulnerability.
bfb0804e3270f39abf82b8d28c58b515VMware Security Advisory 2016-0017 - VMware product updates address information disclosure issues in VMware Fusion and VMware Tools running on Mac OS X.
b2a2ee431c2950df3b33db5e02601785VMware Security Advisory 2016-0016 - vRealize Operations (vROps) updates address privilege escalation vulnerability.
363faacff6b6b5f8313d0f996c413123VMware Security Advisory 2016-0015 - VMware Horizon View contains a vulnerability that may allow for a directory traversal on the Horizon View Connection Server. Exploitation of this issue may lead to a partial information disclosure.
b88e433b0c6c4b51403141d0081416c0VMware Security Advisory 2016-0013 - VMware Identity Manager and vRealize Automation updates address multiple security issues.
ccfc37676763aa24440a076b406cf029VMware Security Advisory 2016-0011 - vRealize Log Insight contains a vulnerability that may allow for a directory traversal attack. Exploitation of this issue may lead to a partial information disclosure. There are no known workarounds for this issue.
6a241aab5dee9f705fe9f2e451a33023VMware Security Advisory 2016-0009 - VMware vCenter Server updates address an important reflective cross-site scripting issue.
c8c5df9b8f31cd21ebb880019bbd27d2VMware Security Advisory 2016-0004 - VMware vCenter Server, vCloud Director (vCD), vRealize Automation (vRA) Identity Appliance, and the Client Integration Plugin (CIP) updates address a critical security issue.
c9895ebcb050e468fa33c61d05e81675VMware Security Advisory 2016-0003 - VMware vRealize Automation and vRealize Business Advanced and Enterprise address Cross-Site Scripting (XSS) issues.
da6b7cd41fa37f75e69abc94d7e8d7e9VMware Security Advisory 2015-0008 - VMware product updates address information disclosure issue.
7ace39edff0170e76c46e56ab3390199VMware Security Advisory 2015-0005 - VMware Workstation, Player, and Horizon View Client for Windows updates address a host privilege escalation vulnerability.
a2697888409cfe12bb5945f63544fc3aVMware Security Advisory 2015-0004 - VMware Workstation, Fusion and Horizon View Client updates address critical security issues.
05ade3f21d689d4ce4c875852310c884VMware Security Advisory 2015-0003 - VMware product updates address critical information disclosure issue in JRE.
72397aa3dd39c27454d69bdbb94ce552VMware Security Advisory 2015-0002 - VMware vSphere Data Protection product update addresses a certificate validation vulnerability.
90c495da18e05939705ef7726b92e478VMware Security Advisory 2015-0001 - VMware vCenter Server, ESXi, Workstation, Player and Fusion address several security issues.
a45dda44dc108cb82a5e5d8f5a6e5a1aVMware Security Advisory 2014-0014 - AirWatch by VMware product update addresses information disclosure vulnerabilities.
0b58c16885502b46248b3fcece3fe0b9VMware Security Advisory 2014-0013 - VMware vCloud Automation Center (vCAC) product updates address a critical vulnerability in the vCAC VMware Remote Console (VMRC) function which could lead to a remote privilege escalation.
44176f2aef6d50e03d8ecc83fb819797VMware Security Advisory 2014-0012 - VMware vSphere product updates address a Cross Site Scripting issue, a certificate validation issue and security vulnerabilities in third-party libraries.
f36bc2e46b09054b56cf41449f829177VMware Security Advisory 2014-0011 - VMware vSphere Data Protection product updates address a vulnerability that could lead to sensitive information disclosure.
c66ec7aba5699a9b7084e0c8682b72d5VMware Security Advisory 2014-0010 - VMware product updates address Bash security vulnerabilities.
a62029dff7e8f86fcd15b53cdef89fd9VMware Security Advisory 2014-0009 - VMware NSX and vCloud Networking and Security (vCNS) product updates address a vulnerability that could lead to critical information disclosure.
e29ff151d6c7e371f8880d091a91bd9e
© 2016 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed