[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fqJqLBO5fwi2PYwyzATWOtQKNAL7iICpPiKq0yT1r9iU":3,"g5a-family:vmware\u002Fvcenter_server_appliance":121,"g5a-ex:vmware\u002Fvcenter_server_appliance@*":122},{"success":4,"data":5},true,{"product":6,"versions":29,"topVulnerabilitiesByEpss":34,"kevVulnerabilities":91,"seoMetadata":99,"meta":118},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":28},"vmware","vcenter_server_appliance",4,14,2,"2014-12-08",[14,17,20,25],{"version":15,"cve_count":16,"kev_count":11,"has_kev":4},"5.0",8,{"version":18,"cve_count":19,"kev_count":11,"has_kev":4},"5.1",11,{"version":21,"cve_count":22,"kev_count":23,"has_kev":24},"5.1.0a",1,0,false,{"version":26,"cve_count":27,"kev_count":11,"has_kev":4},"5.5",5,"Vcenter Server Appliance by Vmware is a technology product with 4 tracked versions and 14 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[30,31,32,33],{"version":15,"cve_count":16,"kev_count":11,"has_kev":4},{"version":18,"cve_count":19,"kev_count":11,"has_kev":4},{"version":21,"cve_count":22,"kev_count":23,"has_kev":24},{"version":26,"cve_count":27,"kev_count":11,"has_kev":4},[35,43,48,56,61,67,72,76,83,87],{"cveId":36,"description":37,"publishedDate":38,"cvssScore":39,"cvssVersion":40,"severity":41,"isKev":4,"epssScore":42},"CVE-2014-6271","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka \"ShellShock.\"  NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.","2014-09-24",9.8,"v3.1","Critical",0.99999,{"cveId":44,"description":45,"publishedDate":46,"cvssScore":39,"cvssVersion":40,"severity":41,"isKev":4,"epssScore":47},"CVE-2014-7169","GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271.","2014-09-25",0.9994,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":52,"cvssVersion":53,"severity":54,"isKev":24,"epssScore":55},"CVE-2014-4241","Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0 allows remote attackers to affect integrity via vectors related to WLS - Web Services.","2014-07-17",4.3,"v2","Medium",0.03838,{"cveId":57,"description":58,"publishedDate":51,"cvssScore":59,"cvssVersion":53,"severity":54,"isKev":24,"epssScore":60},"CVE-2014-4258","Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SRINFOSC.",6.5,0.03482,{"cveId":62,"description":63,"publishedDate":64,"cvssScore":65,"cvssVersion":53,"severity":41,"isKev":24,"epssScore":66},"CVE-2013-3080","VMware vCenter Server Appliance (vCSA) 5.1 before Update 1 allows remote authenticated users to create or overwrite arbitrary files, and consequently execute arbitrary code or cause a denial of service, by leveraging Virtual Appliance Management Interface (VAMI) web-interface access.","2013-05-01",9,0.0247,{"cveId":68,"description":69,"publishedDate":70,"cvssScore":65,"cvssVersion":53,"severity":41,"isKev":24,"epssScore":71},"CVE-2014-3790","Ruby vSphere Console (RVC) in VMware vCenter Server Appliance allows remote authenticated users to execute arbitrary commands as root by escaping from a chroot jail.","2014-06-01",0.02351,{"cveId":73,"description":74,"publishedDate":64,"cvssScore":52,"cvssVersion":53,"severity":54,"isKev":24,"epssScore":75},"CVE-2013-3107","VMware vCenter Server 5.1 before Update 1, when anonymous LDAP binding for Active Directory is enabled, allows remote attackers to bypass authentication by providing a valid username in conjunction with an empty password.",0.01977,{"cveId":77,"description":78,"publishedDate":79,"cvssScore":80,"cvssVersion":53,"severity":81,"isKev":24,"epssScore":82},"CVE-2013-1659","VMware vCenter Server 4.0 before Update 4b, 5.0 before Update 2, and 5.1 before 5.1.0b; VMware ESXi 3.5 through 5.1; and VMware ESX 3.5 through 4.1 do not properly implement the Network File Copy (NFC) protocol, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption) by modifying the client-server data stream.","2013-02-22",7.6,"High",0.01816,{"cveId":84,"description":85,"publishedDate":12,"cvssScore":52,"cvssVersion":53,"severity":54,"isKev":24,"epssScore":86},"CVE-2014-3797","Cross-site scripting (XSS) vulnerability in VMware vCenter Server Appliance (vCSA) 5.1 before Update 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.",0.01795,{"cveId":88,"description":89,"publishedDate":64,"cvssScore":65,"cvssVersion":53,"severity":41,"isKev":24,"epssScore":90},"CVE-2013-3079","VMware vCenter Server Appliance (vCSA) 5.1 before Update 1 allows remote authenticated users to execute arbitrary programs with root privileges by leveraging Virtual Appliance Management Interface (VAMI) access.",0.01737,[92,97],{"cveId":36,"description":37,"publishedDate":38,"cvssScore":39,"severity":41,"isKev":4,"epssScore":42,"cisaVulnName":93,"cisaDateAdded":94,"cisaShortDescription":95,"cisaRequiredAction":96},"GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability","2022-01-28","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.","Apply updates per vendor instructions.",{"cveId":44,"description":45,"publishedDate":46,"cvssScore":39,"severity":41,"isKev":4,"epssScore":47,"cisaVulnName":93,"cisaDateAdded":94,"cisaShortDescription":98,"cisaRequiredAction":96},"GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.",{"title":100,"metaDescription":101,"keywords":102,"structuredData":103},"Vcenter Server Appliance by Vmware - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Vcenter Server Appliance by Vmware covering 4 versions with 14 tracked vulnerabilities including 2 critical and 0 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Vcenter Server Appliance vulnerabilities, Vcenter Server Appliance security, Vcenter Server Appliance CVE, Vmware Vcenter Server Appliance, Vcenter Server Appliance threat intelligence, Vmware security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Vcenter Server Appliance KEV, Vcenter Server Appliance exploited vulnerabilities",{"@context":104,"@type":105,"name":106,"description":101,"url":107,"manufacturer":108,"applicationCategory":112,"softwareVersion":113,"mainEntity":114},"https:\u002F\u002Fschema.org","SoftwareApplication","Vcenter Server Appliance","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fvmware\u002Fvcenter_server_appliance",{"@type":109,"name":110,"url":111},"Organization","Vmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fvmware","Security Software","4 versions tracked",{"@type":115,"name":116,"description":117,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Vcenter Server Appliance Security Vulnerabilities","Security vulnerabilities affecting Vcenter Server Appliance by Vmware",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":119,"apiVersion":120},"2026-10-17T12:02:17.932Z","3.0",[],{"rows":123,"total":11,"capped":24,"failed":23},[124,133],{"cveId":36,"name":93,"severity":41,"cvss":39,"added":94,"epss":42,"published":125,"ranges":126,"checked":4,"hits":132,"covers":24},"2014-09-24T18:48:04.477",[15,127,128,18,129,130,26,131],"5.0-update_1","5.0-update_2","5.1-update_1","5.1-update_2","5.5-update_1",[],{"cveId":44,"name":93,"severity":41,"cvss":39,"added":94,"epss":47,"published":134,"ranges":135,"checked":4,"hits":136,"covers":24},"2014-09-25T01:55:04.367",[15,127,128,18,129,130,26,131],[]]