There is the desirialization vulnerbility about Apache Common Collections in vRO 6.0.x and 5.5.x as we can see in the following KB:
Is this VMware KB applicable to vRO 7.0?
There is the desirialization vulnerbility about Apache Common Collections in vRO 6.0.x and 5.5.x as we can see in the following KB:
Is this VMware KB applicable to vRO 7.0?