Vulnerabilities > Vmware > Vrealize LOG Insight > 3.3.1
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-01-26 | CVE-2022-31704 | Unspecified vulnerability in VMWare Vrealize LOG Insight The vRealize Log Insight contains a broken access control vulnerability. | 9.8 |
| 2023-01-26 | CVE-2022-31706 | Path Traversal vulnerability in VMWare Vrealize LOG Insight The vRealize Log Insight contains a Directory Traversal Vulnerability. | 9.8 |
| 2023-01-26 | CVE-2022-31710 | Deserialization of Untrusted Data vulnerability in VMWare Vrealize LOG Insight vRealize Log Insight contains a deserialization vulnerability. | 7.5 |
| 2023-01-26 | CVE-2022-31711 | Unspecified vulnerability in VMWare Vrealize LOG Insight VMware vRealize Log Insight contains an Information Disclosure Vulnerability. | 5.3 |
| 2022-12-14 | CVE-2022-31703 | Path Traversal vulnerability in VMWare Vrealize LOG Insight The vRealize Log Insight contains a Directory Traversal Vulnerability. | 7.5 |
| 2022-07-12 | CVE-2022-31654 | Cross-site Scripting vulnerability in VMWare Vrealize LOG Insight VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improper input sanitization in configurations. | 5.4 |
| 2022-07-12 | CVE-2022-31655 | Cross-site Scripting vulnerability in VMWare Vrealize LOG Insight VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improper input sanitization in alerts. | 5.4 |
| 2020-04-15 | CVE-2020-3954 | Open Redirect vulnerability in VMWare Vrealize LOG Insight Open Redirect vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation. | 6.1 |
| 2020-04-15 | CVE-2020-3953 | Improper Input Validation vulnerability in VMWare Vrealize LOG Insight Cross Site Scripting (XSS) vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation. | 4.8 |
| 2016-07-03 | CVE-2016-2082 | Cross-Site Request Forgery (CSRF) vulnerability in VMWare Vrealize LOG Insight Cross-site request forgery (CSRF) vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.3.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. | 8.8 |