CVE-2016-5334: VMware Identity Manager

Medium severity, CVSS 5.3. EPSS: 2.1% chance of exploitation in the next 30 days.

VMware Identity Manager 2.x before 2.7.1 and vRealize Automation 7.x before 7.2.0 allow remote attackers to read /SAAS/WEB-INF and /SAAS/META-INF files via unspecified vectors.

Affected products

• VMware Identity Manager: from 2.0, before 2.7.1 (fixed in 2.7.1)
• VMware vRealize Automation: from 7.0, before 7.2.0 (fixed in 7.2.0)

Published 2016-12-29. Last modified 2026-06-17.