Beveiligingsadvies

CVE-2023-20855

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-02-21 00:00:00

Laatst bijgewerkt 2025-03-17 18:25:24

Toegewezen door vmware

CVSS-score 8.8

Status PUBLISHED

Beschrijving

VMware vRealize Orchestrator contains an XML External Entity (XXE) vulnerability. A malicious actor, with non-administrative access to vRealize Orchestrator, may be able to use specially crafted input to bypass XML parsing restrictions leading to access to sensitive information or possible escalation of privileges.

← Alle CVE's bekijken Bekijk op cve.org ↗