VMware vCenter Orchestrator vulnerabilities

2 CVEs affecting VMware vCenter Orchestrator, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-6934, published 2015-12-21.

More from VMware.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-6934, published 2015-12-21. High severity, CVSS 7.3. EPSS: 5% chance of exploitation in the next 30 days. Serialized-object interfaces in VMware vRealize Orchestrator 6.x, vCenter Orchestrator 5.x, vRealize Operations 6.x, vCenter Operations 5.x, and vCenter Application Discovery Manager (vADM) 7.x allow…
• CVE-2012-1513, published 2012-03-16. Medium severity, CVSS 4.0. EPSS: 1.2% chance of exploitation in the next 30 days. The Web Configuration tool in VMware vCenter Orchestrator (vCO) 4.0 before Update 4, 4.1 before Update 2, and 4.2 before Update 1 places the vCenter Server password in an HTML document, which allows…