Vmware: >> Vrealize Automation >> 6.2.5 Security Vulnerabilities
VMware vRealize Automation (vRA) prior to 7.3.1 contains a vulnerability that may allow for a DOM-based cross-site scripting (XSS) attack. Exploitation of this issue may lead to the compromise of the vRA user's workstation.
CVSS Score
6.1
EPSS Score
0.002
Published
2018-04-13
VMware vRealize Automation (vRA) prior to 7.4.0 contains a vulnerability in the handling of session IDs. Exploitation of this issue may lead to the hijacking of a valid vRA user's session.
CVSS Score
9.8
EPSS Score
0.015
Published
2018-04-13