CVE-2017-4926 | BDVDB-2026-90522 Detail

VMwarevCenter Server

Description#

VMware vCenter Server (6.5 prior to 6.5 U1) contains a vulnerability that may allow for stored cross-site scripting (XSS). An attacker with VC user privileges can inject malicious java-scripts which will get executed when other VC users access the page.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securitytracker.com/id/1039364
https://www.vmware.com/security/advisories/VMSA-2017-0015.html
http://www.securityfocus.com/bid/100844

Exploit#

No public exploit known

History#

Version 12017-09-15Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.