Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
VMware vRealize Orchestrator contains an XML External Entity (XXE) vulnerability. A malicious actor, with non-administrative access to vRealize Orchestrator, may be able to use specially crafted input to bypass XML parsing restrictions leading to access to sensitive information or possible escalation of privileges.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
VMware vRealize Orchestrator 代码问题漏洞
Vulnerability Description
VMware vRealize Orchestrator是美国威睿（VMware）公司的一种工作流自动化解决方案。旨在简化复杂 IT 任务的自动化。 VMware vRealize Orchestrator存在安全漏洞，该漏洞源于对 vRealize Orchestrator 具有非管理访问权限的恶意行为者能够使用特制输入来绕过 XML 解析限制，攻击者利用该漏洞可以访问敏感信息或权限升级，以下产品和版本受到影响：VMware vRealize Orchestrator 8.x（8.11.1之前）版本、V
CVSS Information
N/A
Vulnerability Type
N/A