CVE-2017-4930

2017-11-0800:00:00

vmware

www.cve.org

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.9%

JSON

VMware AirWatch Console 9.x prior to 9.2.0 contains a vulnerability that could allow an authenticated AWC user to add a malicious URL to an enrolled device’s ‘Links’ page. Successful exploitation of this issue could result in an unsuspecting AWC user being redirected to a malicious URL.

CNA Affected

[
  {
    "product": "VMware AirWatch Console (AWC)",
    "vendor": "VMware",
    "versions": [
      {
        "status": "affected",
        "version": "9.x before 9.2.0"
      }
    ]
  }
]