CVE-2016-2078

概要

参考情報

• hyp3rlinx.altervista.org/advisories/VMWARE-VSPHERE-FLASH-XSS.txt
• packetstormsecurity.com/files/137189/VMWare-vSphere-Web-Client-6.0-Cross-Site-Scripting.html · Exploit
• securityfocus.com/archive/1/538484/100/0/threaded
• securitytracker.com/id/1035961
• vmware.com/security/advisories/VMSA-2016-0006.html · Vendor Advisory

vcenter server のその他の脆弱性

• CVE-2026-59310緊急 9.8悪用確認済み（CISA KEV）VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may explo…
• CVE-2026-59309緊急 9.8VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCe…
• CVE-2024-38813緊急 9.8悪用確認済み（CISA KEV）The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Server may trigger this v…
• CVE-2024-38812緊急 9.8悪用確認済み（CISA KEV）The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network acces…
• CVE-2024-37087中 5.3The vCenter Server contains a denial-of-service vulnerability. A malicious actor with network access to vCenter Server may create a denial-o…