CVE-2012-6325

CVE Database · CVE-2012-6325

CVE-2012-6325

· N/AModified

CVSS v3.1

N/A

EPSS

0.95%

Published

Dec 21, 2012

Modified

Apr 28, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

VMware vCenter Server Appliance (vCSA) 5.0 before Update 2 does not properly parse XML documents, which allows remote authenticated users to read arbitrary files via unspecified vectors.

Weaknesses (CWE)

CWE-200

Affected Products (2)

vmware · vcenter_server_appliancevulnerable

References (2)

http://www.vmware.com/security/advisories/VMSA-2012-0018.html

Vendor Advisory

http://www.vmware.com/security/advisories/VMSA-2012-0018.html

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs