PT-2017-16209

Name of the Vulnerable Software and Affected Versions VMware vCenter Server versions 6.5 prior to 6.5 U1 Description The issue allows for stored cross-site scripting XSS, which can be exploited by an attacker with VC user privileges to inject malicious java-scripts. These scripts will be executed...

CVE-2017-4926: Improper Neutralization of Input During Web Page Generation

VMware vCenter Server 6.5 prior to 6.5 U1 contains a vulnerability that may allow for stored cross-site scripting XSS. An attacker with VC user privileges can inject malicious java-scripts which will get executed when other VC users access the page...