Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

15 records

Vendor: VMware Component: Vrealize Log Insight Clear all filters
TI-2022-13628 CVE-2022-31711 · GHSA-jpmc-cx3p-xjqg

Information disclosure in vRealize Log Insight

Priority MEDIUM 50

VMware vRealize Log Insight contains an Information Disclosure Vulnerability.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.22304 Published 2023-01-25 No fix listed CWE-200
TI-2022-13624 CVE-2022-31706 · GHSA-653w-r2gq-wv35

Path traversal in vRealize Log Insight

Priority CRITICAL 91

The vRealize Log Insight contains a Directory Traversal Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.87077 Published 2023-01-25 No fix listed CWE-22
TI-2022-13622 CVE-2022-31704 · GHSA-x63f-7pqq-c59r

Improper access control in vRealize Log Insight

Priority CRITICAL 89

The vRealize Log Insight contains a broken access control vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.81011 Published 2023-01-25 No fix listed CWE-284
TI-2022-13621 CVE-2022-31703 · GHSA-v2g5-92j4-qq7q

Path traversal in vRealize Log Insight

Priority MEDIUM 45

The vRealize Log Insight contains a Directory Traversal Vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01935 Published 2022-12-14 No fix listed CWE-22
TI-2022-13574 CVE-2022-31655 · GHSA-2g25-66rq-pgwq

Cross-site scripting in VMware vRealize Log Insight

Priority LOW 25

VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improper input sanitization in alerts.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00433 Published 2022-07-12 No fix listed CWE-79
TI-2022-13573 CVE-2022-31654 · GHSA-q65w-fc7h-2r6w

Cross-site scripting in VMware vRealize Log Insight

Priority LOW 25

VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improper input sanitization in configurations.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00433 Published 2022-07-12 No fix listed CWE-79
TI-2021-05077 CVE-2021-22035 · GHSA-p728-xw8r-5f6m

Injection in VMware vRealize Log Insight

Priority LOW 21

VMware vRealize Log Insight (8.x prior to 8.6) contains a CSV(Comma Separated Value) injection vulnerability in interactive analytics export function.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00572 Published 2021-10-13 No fix listed CWE-74
TI-2021-05065 CVE-2021-22021 · GHSA-mw4g-p3x5-fwh9

Cross-site scripting in VMware vRealize Log Insight

Priority LOW 25

VMware vRealize Log Insight (8.x prior to 8.4) contains a Cross Site Scripting (XSS) vulnerability due to improper user input validation.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00468 Published 2021-08-30 No fix listed CWE-79
TI-2020-03451 CVE-2020-3953 · GHSA-5jp2-26h4-r89j

Improper input validation in VMware vRealize Log Insight

Priority LOW 23

Cross Site Scripting (XSS) vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00653 Published 2020-04-15 No fix listed CWE-20
TI-2018-05102 CVE-2018-6980 · GHSA-pvc9-qr25-w7jc

Incorrect authorization in VMware vRealize Log Insight

Priority LOW 35

VMware vRealize Log Insight (4.7.x before 4.7.1 and 4.6.x before 4.6.2) contains a vulnerability due to improper authorization in the user registration method.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01438 Published 2018-11-13 No fix listed CWE-863