VL
Product
Vrealize Log Insight
15
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 9Low 0
Watch
Add Vrealize Log Insight to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-3954 | 6.1 | Apr 15 | Open Redirect vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation Affected: before 8.1.0 |
| CVE-2016-2081 | 6.1 | Jul 3 | Cross-site scripting (XSS) vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified… Affected: 2.0; 2.0.5; 2.5; 2.5.1; 3.0; 3.0.1; +2 more |
| CVE-2022-31655 | 5.4 | Jul 12 | VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improper input sanitization in alerts Affected: before 8.8.2 |
| CVE-2022-31654 | 5.4 | Jul 12 | VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improper input sanitization in configurations Affected: before 8.8.2 |
| CVE-2021-22021 | 5.4 | Aug 30 | VMware vRealize Log Insight (8.x prior to 8.4) contains a Cross Site Scripting (XSS) vulnerability due to improper user input validation Affected: 4.0 through 4.8; 8.0.0 before 8.4 |
| CVE-2022-31711 | 5.3 | Jan 26 | VMware vRealize Log Insight contains an Information Disclosure Vulnerability Affected: 3.0 through 4.8; 8.0.0 before 8.10.2 |
| CVE-2016-5332 | 5.3 | Aug 31 | Directory traversal vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.6.0 allows remote attackers to read arbitrary files via unspecified vectors Affected: 2.0; 2.0.5; 2.5; 3.0; 3.3 |
| CVE-2020-3953 | 4.8 | Apr 15 | Cross Site Scripting (XSS) vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation Affected: before 8.1.0 |
| CVE-2021-22035 | 4.3 | Oct 13 | VMware vRealize Log Insight (8.x prior to 8.6) contains a CSV(Comma Separated Value) injection vulnerability in interactive analytics export function Affected: after 8.0.0 before 8.60 |
Showing 9
