Vcenter Chargeback Manager

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2013-3520 HIGH POC THREAT Act Now

VMware vCenter Chargeback Manager (aka CBM) before 2.5.1 does not proper handle uploads, which allows remote attackers to execute arbitrary code via unspecified vectors. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 81.9%.

Code Injection VMware RCE Vcenter Chargeback Manager

NVD Exploit-DB

CVSS 2.0

7.5

EPSS

81.9%

Threat

5.5

CVE-2012-1472 MEDIUM This Month

VMware vCenter Chargeback Manager (aka CBM) before 2.0.1 does not properly handle XML API requests, which allows remote attackers to read arbitrary files or cause a denial of service via unspecified. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

VMware Denial Of Service Vcenter Chargeback Manager

NVD

CVSS 2.0

6.4

EPSS

0.8%

CVE-2013-3520

EPSS 82% 5.5 CVSS 7.5

HIGH POC THREAT Act Now

Code Injection VMware RCE +1

NVD Exploit-DB

CVE-2012-1472

EPSS 1% CVSS 6.4

MEDIUM This Month

VMware Denial Of Service Vcenter Chargeback Manager

NVD