CVE-2016-7463

Cross-site scripting XSS vulnerability in the Host Client in VMware vSphere Hypervisor aka ESXi 5.5 and 6.0 allows remote authenticated users to inject arbitrary web script or HTML via a crafted VM...

PT-2016-7345

Name of the Vulnerable Software and Affected Versions VMware vSphere Hypervisor aka ESXi versions 5.5 through 6.0 Description The issue is related to a cross-site scripting XSS vulnerability in the Host Client. This allows remote authenticated users to inject arbitrary web script or HTML via a...

CVE-2016-7463: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Host Client in VMware vSphere Hypervisor aka ESXi 5.5 and 6.0 allows remote authenticated users to inject arbitrary web script or HTML via a crafted VM...

VMSA-2016-0023 : VMware ESXi updates address a cross-site scripting issue

a. Host Client stored cross-site scripting issue The ESXi Host Client contains a vulnerability that may allow for stored cross-site scripting XSS. The issue can be introduced by an attacker that has permission to manage virtual machines through ESXi Host Client or by tricking the vSphere...