VMware vRealize Orchestrator, VMware vRealize Automation, VMware Cloud Foundation vulnerabilities
We track 1 vulnerability in VMware vRealize Orchestrator, VMware vRealize Automation, VMware Cloud Foundation products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on February 22, 2023.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest VMware vRealize Orchestrator, VMware vRealize Automation, VMware Cloud Foundation vulnerabilities
- 8.8 High severity
VMware vRealize Orchestrator, VMware vRealize…: Improper Restriction of XML External Entity Reference
VMware vRealize Orchestrator contains an XML External Entity (XXE) vulnerability. A malicious actor, with non-administrative access to vRealize Orchestrator, may be able to use specially crafted input to bypass XML parsing restrictions leading to access to sen