Login Request a demo
VL
Product
Vrealize Log Insight
by Vmware · last CVE Jan 26, 2023
15
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities15In the news0Timeline
Severity mix
Critical 2High 4Medium 9Low 0
Severity
All severities15Critical2High4Medium9Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Vrealize Log Insight to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-31706
9.8
87%
Jan 26
The vRealize Log Insight contains a Directory Traversal Vulnerability
Affected: 3.0 through 4.8; 8.0.0 before 8.10.2
CVE-2022-31704
9.8
81%
Jan 26
The vRealize Log Insight contains a broken access control vulnerability
Affected: 3.0 through 4.8; 8.0.0 before 8.10.2
CVE-2016-2082
8.8
1%
Jul 3
Cross-site request forgery (CSRF) vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.3.2 allows remote attackers to hijack the authentication of unspecified victims…
Affected: 2.0; 2.0.5; 2.5; 2.5.1; 3.0; 3.0.1; +2 more
CVE-2022-31710
7.5
1%
Jan 26
vRealize Log Insight contains a deserialization vulnerability
Affected: 3.0 through 4.8; 8.0.0 before 8.10.2
CVE-2022-31703
7.5
2%
Dec 14
The vRealize Log Insight contains a Directory Traversal Vulnerability
Affected: through 8.10.1
CVE-2018-6980
7.2
1%
Nov 13
VMware vRealize Log Insight (4.7.x before 4.7.1 and 4.6.x before 4.6.2) contains a vulnerability due to improper authorization in the user registration method
Affected: 4.6 before 4.6.2; 4.7 before 4.7.1
CVE-2020-3954
6.1
1%
Apr 15
Open Redirect vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation
Affected: before 8.1.0
CVE-2016-2081
6.1
1%
Jul 3
Cross-site scripting (XSS) vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified…
Affected: 2.0; 2.0.5; 2.5; 2.5.1; 3.0; 3.0.1; +2 more
CVE-2022-31655
5.4
0%
Jul 12
VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improper input sanitization in alerts
Affected: before 8.8.2
CVE-2022-31654
5.4
0%
Jul 12
VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improper input sanitization in configurations
Affected: before 8.8.2
CVE-2021-22021
5.4
0%
Aug 30
VMware vRealize Log Insight (8.x prior to 8.4) contains a Cross Site Scripting (XSS) vulnerability due to improper user input validation
Affected: 4.0 through 4.8; 8.0.0 before 8.4
CVE-2022-31711
5.3
22%
Jan 26
VMware vRealize Log Insight contains an Information Disclosure Vulnerability
Affected: 3.0 through 4.8; 8.0.0 before 8.10.2
CVE-2016-5332
5.3
3%
Aug 31
Directory traversal vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.6.0 allows remote attackers to read arbitrary files via unspecified vectors
Affected: 2.0; 2.0.5; 2.5; 3.0; 3.3
CVE-2020-3953
4.8
1%
Apr 15
Cross Site Scripting (XSS) vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation
Affected: before 8.1.0
CVE-2021-22035
4.3
1%
Oct 13
VMware vRealize Log Insight (8.x prior to 8.6) contains a CSV(Comma Separated Value) injection vulnerability in interactive analytics export function
Affected: after 8.0.0 before 8.60
Showing 15