Vrealize Orchestrator vulnerabilities

1 known vulnerability in Vrealize Orchestrator from VMware. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  VMware vRealize Orchestrator, VMware vRealize…: Improper Restriction of XML External Entity Reference

  CVE-2023-20855Feb 22, 2023VMware vRealize Orchestrator, VMware vRealize Automation, VMware Cloud FoundationEPSS 1.26%

  VMware vRealize Orchestrator contains an XML External Entity (XXE) vulnerability. A malicious actor, with non-administrative access to vRealize Orchestrator, may be able to use specially crafted input to bypass XML parsing restrictions leading to access to sen