Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
VMware

VMware vRealize Automation vulnerabilities

3 published CVEs name VMware vRealize Automation among the affected products.

All 3 in the listAtom feed of new CVEs
Published CVEs
3
Last 12 months
0
Critical
2
Known exploited
0

Critical 2High 0Medium 1Low 0Not scored 0

Newest CVEs

  • CVE-2018-6959

    VMware vRealize Automation (vRA) prior to 7.4.0 contains a vulnerability in the handling of session IDs. Exploitation of this issue may lead to the hijacking…

    VMware · vRealize Automation

    Critical9.8
  • CVE-2018-6958

    VMware vRealize Automation (vRA) prior to 7.3.1 contains a vulnerability that may allow for a DOM-based cross-site scripting (XSS) attack. Exploitation of this…

    VMware · vRealize Automation

    Medium6.1
  • CVE-2017-4947

    VMware vRealize Automation (7.3 and 7.2) and vSphere Integrated Containers (1.x before 1.3) contain a deserialization vulnerability via Xenon. Successful…

    VMware · vRealize Automation

    Critical9.8

Most common weaknesses

  1. CWE-384 1
  2. CWE-502 Deserialization of untrusted data1
  3. CWE-79 Cross-site scripting (XSS)1