Intrusion Prevention



This indicates an attack attempt to exploit an Expression Language Injection Vulnerability in VMware Cloud Director.
This vulnerability is due to insufficient handling of HTTP request. Successful exploitation results in the execution of arbitrary code on the target system.

Affected Products

VMware Cloud Director 10.0.x prior to
VMware Cloud Director 9.7.0.x prior to
VMware Cloud Director 9.5.0.x prior to
VMware Cloud Director 9.1.0.x prior to


System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Applied latest upgrade or patch from the vendor:

CVE References