CVE Feed

    Dashboard / CVE / CVE-2016-5334

    CVE-2016-5334

    VMware Identity Manager 2.x before 2.7.1 and vRealize Automation 7.x before 7.2.0 allow remote attackers to read /SAAS/WEB-INF and /SAAS/META-INF files via unspecified vectors.

    Published:Dec 29, 2016
    Last Modified:Apr 12, 2025
    EPS:Dec 29, 2016
    EPSS Score:0.0023
    CVSS Score:5.3

    Affected Products

    Vendor
    Vmware
    Product
    Identity Manager
    Vendor
    Vmware
    Product
    Vrealize Automation

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2023-20884 (CVSS 6.1) — VMware Workspace ONE Access and VMware Identity Manager contain an insecure redirect vulnerability. An unauthe…
    CVE-2022-31700 (CVSS 7.2) — VMware Workspace ONE Access and Identity Manager contain an authenticated remote code execution vulnerability.…
    CVE-2022-31657 (CVSS 9.8) — VMware Workspace ONE Access and Identity Manager contain a URL injection vulnerability. A malicious actor with…
    CVE-2022-31656 (CVSS 9.8) — VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnera…
    CVE-2022-31658 (CVSS 7.2) — VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerab…
    CVE-2022-31661 (CVSS 7.8) — VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two privilege escalation vulnera…
    CVE-2022-31659 (CVSS 7.2) — VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability. A malicious ac…
    CVE-2022-31663 (CVSS 6.1) — VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a reflected cross-site scripting…
    CVE-2022-31664 (CVSS 7.8) — VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerabi…
    CVE-2022-31665 (CVSS 7.2) — VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerab…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High