CVE-2017-4926

VMware vCenter Server (6.5 prior to 6.5 U1) contains a vulnerability that may allow for stored cross-site scripting (XSS)

published September 15, 2017

CVSS
—
EPSS
1%
Percentile
55.4
In the wild
Unconfirmed
What it is

VMware vCenter Server (6.5 prior to 6.5 U1) contains a vulnerability that may allow for stored cross-site scripting (XSS). An attacker with VC user privileges can inject malicious java-scripts which will get executed when other VC users access the page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00777 · 55.4th percentile
Published
2017-09-15T13:00Z
EPSS history
Timeline
  • 15 SEP 13:00Z
    VMware vCenter Server (6.5 prior to 6.5 U1) contains a vulnerability that may allow for stored cross-site scripting (XSS)
    cvelistv5