6.2.5

DATE	CVE	VULNERABILITY TITLE	RISK
2018-04-13	CVE-2018-6959	Session Fixation vulnerability in VMWare Vrealize Automation VMware vRealize Automation (vRA) prior to 7.4.0 contains a vulnerability in the handling of session IDs. network low complexity vmware CWE-384 critical	9.8
2018-04-13	CVE-2018-6958	Cross-site Scripting vulnerability in VMWare Vrealize Automation VMware vRealize Automation (vRA) prior to 7.3.1 contains a vulnerability that may allow for a DOM-based cross-site scripting (XSS) attack. network low complexity vmware CWE-79	6.1