Toutvirtual's vulnerability footprint centers on its VirtualIQ virtualization management platform, where disclosures cluster around application-layer input handling and access control, notably cross-site scripting, cross-site request forgery, improper authentication, and exposure of sensitive information. The vendor's vulnerabilities frequently acquire public exploit code, reflecting the web-based administrative interface that characterizes this class of management software. Current exploitation activity and severity counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Toutvirtual over time
Signals from CVEs in this vendor scope (6 CVEs).
6 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2009-4849MEDIUM Multiple cross-site request forgery (CSRF) vulnerabilities in ToutVirtual VirtualIQ Pro 3.2 build 7882 and 3.5 build 8691 allow remote attackers to hijack the authentication of adm | May 7, 2010 | 6.8 | 28 | NO | YES |
CVE-2009-4843HIGH ToutVirtual VirtualIQ Pro before 3.5 build 8691 does not require administrative authentication for JBoss console access, which allows remote attackers to execute arbitrary commands | May 7, 2010 | 7.5 | 22 | NO | NO |
CVE-2009-4845MEDIUM The configuration page in ToutVirtual VirtualIQ Pro 3.2 build 7882 contains cleartext SSH credentials, which allows remote attackers to obtain sensitive information by reading the | May 7, 2010 | 5.0 | 17 | NO | NO |
CVE-2009-4844MEDIUM ToutVirtual VirtualIQ Pro 3.2 build 7882 does not restrict access to the /status URI on port 9080, which allows remote attackers to obtain sensitive Tomcat information via a direct | May 7, 2010 | 5.0 | 17 | NO | NO |
CVE-2009-4848MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in ToutVirtual VirtualIQ Pro 3.2 build 7882 and 3.5 build 8691 allow remote attackers to inject arbitrary web script or HTML via | May 7, 2010 | 4.3 | 15 | NO | NO |
CVE-2009-4842MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in ToutVirtual VirtualIQ Pro 3.5 build 8691 allow remote attackers to inject arbitrary web script or HTML via the (1) addNewDept | May 7, 2010 | 4.3 | 15 | NO | NO |
Signals from CVEs in this vendor scope (6 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Toutvirtual.
Media articles that mention a CVE ID that affects a product developed by Toutvirtual — matched by CVE ID, not by vendor name.