vRealize Log Insight (vRLI) vulnerabilities
We track 4 vulnerabilities in vRealize Log Insight (vRLI) products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on January 26, 2023.
Latest vRealize Log Insight (vRLI) vulnerabilities
- 7.5 High severity
vRealize Log Insight (vRLI): Deserialization of Untrusted Data
vRealize Log Insight contains a deserialization vulnerability. An unauthenticated malicious actor can remotely trigger the deserialization of untrusted data which could result in a denial of service.
- 9.8 Critical severity
vRealize Log Insight (vRLI): Improper Limitation of a Pathname to a Restricted Directory
The vRealize Log Insight contains a Directory Traversal Vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution.
- 9.8 Critical severity
vRealize Log Insight (vRLI): Improper Access Control
The vRealize Log Insight contains a broken access control vulnerability. An unauthenticated malicious actor can remotely inject code into sensitive files of an impacted appliance which can result in remote code execution.
- 7.5 High severity
vRealize Log Insight (vRLI): Improper Limitation of a Pathname to a Restricted Directory
The vRealize Log Insight contains a Directory Traversal Vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution.