CVE-2017-4947

2018-01-2600:00:00

vmware

www.cve.org

9.8 High

AI Score

Confidence

High

0.046 Low

EPSS

Percentile

92.6%

JSON

VMware vRealize Automation (7.3 and 7.2) and vSphere Integrated Containers (1.x before 1.3) contain a deserialization vulnerability via Xenon. Successful exploitation of this issue may allow remote attackers to execute arbitrary code on the appliance.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "vRealize Automation",
    "vendor": "VMware",
    "versions": [
      {
        "status": "affected",
        "version": "7.3 and 7.2"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "vSphere Integrated Containers",
    "vendor": "VMware",
    "versions": [
      {
        "status": "affected",
        "version": "1.x before 1.3"
      }
    ]
  }
]