CVE-2017-4926

2017-09-1400:00:00

vmware

www.cve.org

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.9%

JSON

VMware vCenter Server (6.5 prior to 6.5 U1) contains a vulnerability that may allow for stored cross-site scripting (XSS). An attacker with VC user privileges can inject malicious java-scripts which will get executed when other VC users access the page.

CNA Affected

[
  {
    "product": "vCenter Server",
    "vendor": "VMware",
    "versions": [
      {
        "status": "affected",
        "version": "6.5 prior to 6.5 U1"
      }
    ]
  }
]