) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
Search Results (Refine Search)
- Results Type: Overview
- Keyword (text search): cpe:2.3:a:vmware:vrealize_log_insight:4.7:*:*:*:*:*:*:*
- CPE Name Search: true
| Vuln ID | Summary | CVSS Severity |
|---|---|---|
| CVE-2022-31711 |
VMware vRealize Log Insight contains an Information Disclosure Vulnerability. A malicious actor can remotely collect sensitive session and application information without authentication. Published: January 26, 2023; 4:15:38 PM -0500 |
V3.1: 5.3 MEDIUM V2.0:(not available) |
| CVE-2022-31710 |
vRealize Log Insight contains a deserialization vulnerability. An unauthenticated malicious actor can remotely trigger the deserialization of untrusted data which could result in a denial of service. Published: January 26, 2023; 4:15:38 PM -0500 |
V3.1: 7.5 HIGH V2.0:(not available) |
| CVE-2022-31706 |
The vRealize Log Insight contains a Directory Traversal Vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution. Published: January 26, 2023; 4:15:37 PM -0500 |
V3.1: 9.8 CRITICAL V2.0:(not available) |
| CVE-2022-31704 |
The vRealize Log Insight contains a broken access control vulnerability. An unauthenticated malicious actor can remotely inject code into sensitive files of an impacted appliance which can result in remote code execution. Published: January 26, 2023; 4:15:37 PM -0500 |
V3.1: 9.8 CRITICAL V2.0:(not available) |
| CVE-2022-31703 |
The vRealize Log Insight contains a Directory Traversal Vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution. Published: December 14, 2022; 2:15:13 PM -0500 |
V3.1: 7.5 HIGH V2.0:(not available) |
| CVE-2022-31655 |
VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improper input sanitization in alerts. Published: July 12, 2022; 5:15:10 PM -0400 |
V3.1: 5.4 MEDIUM V2.0: 3.5 LOW |
| CVE-2022-31654 |
VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improper input sanitization in configurations. Published: July 12, 2022; 5:15:10 PM -0400 |
V3.1: 5.4 MEDIUM V2.0: 3.5 LOW |
| CVE-2021-22021 |
VMware vRealize Log Insight (8.x prior to 8.4) contains a Cross Site Scripting (XSS) vulnerability due to improper user input validation. An attacker with user privileges may be able to inject a malicious payload via the Log Insight UI which would be executed when the victim accesses the shared dashboard link. Published: August 30, 2021; 3:15:08 PM -0400 |
V3.1: 5.4 MEDIUM V2.0: 3.5 LOW |
| CVE-2020-3954 |
Open Redirect vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation. Published: April 15, 2020; 2:15:15 PM -0400 |
V3.1: 6.1 MEDIUM V2.0: 5.8 MEDIUM |
| CVE-2020-3953 |
Cross Site Scripting (XSS) vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation. Published: April 15, 2020; 2:15:15 PM -0400 |
V3.1: 4.8 MEDIUM V2.0: 3.5 LOW |
| CVE-2018-6980 |
VMware vRealize Log Insight (4.7.x before 4.7.1 and 4.6.x before 4.6.2) contains a vulnerability due to improper authorization in the user registration method. Successful exploitation of this issue may allow Admin users with view only permission to perform certain administrative functions which they are not allowed to perform. Published: November 13, 2018; 5:29:00 PM -0500 |
V3.1: 7.2 HIGH V2.0: 6.5 MEDIUM |