CVE-2018-6980

7.2 highEPSS 1.4%

High (7.2) in vmware vrealize log insight. EPSS 1.4% chance of exploitation in the next 30 days.

VMware vRealize Log Insight (4.7.x before 4.7.1 and 4.6.x before 4.6.2) contains a vulnerability due to improper authorization in the user registration method. Successful exploitation of this issue may allow Admin users with view only permission to perform certain administrative functions which they are not allowed to perform.

Severity

CVSS 3.1

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
CWE: CWE-863
Published: 2018-11-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

vmware:vrealize_log_insight

References

http://www.securityfocus.com/bid/105925
https://www.vmware.com/security/advisories/VMSA-2018-0028.html
http://www.securityfocus.com/bid/105925
https://www.vmware.com/security/advisories/VMSA-2018-0028.html

Check your stack JSON