Vulnerabilities (CVE)

Filtered by vendor Vmware Subscribe
Filtered by product Vrealize Orchestrator
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-22036 1 Vmware 2 Vrealize Automation, Vrealize Orchestrator 2021-10-20 4.3 MEDIUM 6.5 MEDIUM
VMware vRealize Orchestrator ((8.x prior to 8.6) contains an open redirect vulnerability due to improper path handling. A malicious actor may be able to redirect victim to an attacker controlled domain due to improper path handling in vRealize Orchestrator leading to sensitive information disclosure.