Vcenter Orchestrator

vcenter_orchestrator

Vendor: Vmware • 2 CVEs

CVEs (2)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2015-6934

1Vmware

2Vcenter Orchestrator

Vrealize Orchestrator

May 6, 2026

Dec 21, 2015

N/A· v4

7.3 HIGH· v3

7.5 HIGH· v2

Serialized-object interfaces in VMware vRealize Orchestrator 6.x, vCenter Orchestrator 5.x, vRealize Operations 6.x, vCenter Operations 5.x, and vCenter Application Discovery Manager (vADM) 7.x allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.Show less

CVE-2012-1513

1Vmware

1Vcenter Orchestrator

Apr 29, 2026

Mar 16, 2012

N/A· v4

N/A· v3

4.0 MEDIUM· v2

The Web Configuration tool in VMware vCenter Orchestrator (vCO) 4.0 before Update 4, 4.1 before Update 2, and 4.2 before Update 1 places the vCenter Server password in an HTML document, which allows remote authenticated...Show more