Vulners
Lucene search
VMware View Portal <= 3.1 XSS vulnerability
| Reporter | Title | Published | Views | Family All 17 |
|---|---|---|---|---|
 | CVE-2010-1143 | 5 May 201000:00 | – | circl |
 | CVE-2010-1143 | 7 May 201017:43 | – | cve |
 | CVE-2010-1143 | 7 May 201017:43 | – | cvelist |
 | VMware View Portal 3.1 - Cross-Site Scripting | 14 May 201000:00 | – | exploitdb |
 | EUVD-2010-1174 | 7 Oct 202500:30 | – | euvd |
 | VMware View Portal 3.1 - Cross-Site Scripting | 14 May 201000:00 | – | exploitpack |
 | GLSA-201209-25 : VMware Player, Server, Workstation: Multiple vulnerabilities | 1 Oct 201200:00 | – | nessus |
 | VMware Player, Server, Workstation: Multiple vulnerabilities | 29 Sep 201200:00 | – | gentoo |
 | CVE-2010-1143 | 7 May 201018:24 | – | nvd |
 | Gentoo Security Advisory GLSA 201209-25 (vmware-server vmware-player vmware-workstation) | 3 Oct 201200:00 | – | openvas |
10
[DSECRG-09-058] Vmware View - XSS vulnerability
Source:http://www.dsecrg.com/pages/vul/show.php?id=158
Linked XSS in VMware Portal
Digital Security Research Group [DSecRG] Advisory DSECRG-09-058
Application: VMware View Portal
Versions Affected: <= 3.1
Vendor URL: http://www.vmware.com
Bugs: XSS
Exploits: YES
Reported: 07.09.2009
Vendor response: 21.09.2009
Date of Public Advisory: 05.05.2010
CVE: CVE-2010-1143
Author: Alexey Sintsov
from Digital Security Research Group [DSecRG] (research [at] dsecrg [dot] com)
Description
***********
Linked XSS in VMware Portal
Details
*******
An attacker may inject JavaScript code into url.
Example:
********
https://[VMware_Portal_IP]/not_a_real_page<SCRIPT>alert(/XSS/.source)</SCRIPT>
Solution
********
Update VmWare View to version 3.1.3
References
**********
http://dsecrg.com/pages/vul/show.php?id=149
http://lists.vmware.com/pipermail/security-announce/2010/000092.html
About
*****
Digital Security is leading IT security company in Russia, providing information security consulting, audit and penetration testing services, risk analysis and ISMS-related services and certification for ISO/IEC 27001:2005 and PCI DSS standards. Digital Security Research Group focuses on web application and database security problems with vulnerability reports, advisories and whitepapers posted regularly on our website.
Contact: research [at] dsecrg [dot]com
http://www.dsecrg.com
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
01 Jul 2014 00:00Current
6.7Medium risk
Vulners AI Score6.7
EPSS0.0149