CVE-2017-4940

The ESXi Host Client in VMware ESXi (6.5 before ESXi650-201712103-SG, 5.5 before ESXi600-201711103-SG and 5.5 before ESXi550-201709102-SG) contains a…

published December 20, 2017

CVSS
—
EPSS
1%
Percentile
59.4
In the wild
Unconfirmed
What it is

The ESXi Host Client in VMware ESXi (6.5 before ESXi650-201712103-SG, 5.5 before ESXi600-201711103-SG and 5.5 before ESXi550-201709102-SG) contains a vulnerability that may allow for stored cross-site scripting (XSS). An attacker can exploit this vulnerability by injecting Javascript, which might get executed when other users access the Host Client.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00910 · 59.4th percentile
Published
2017-12-20T15:00Z
EPSS history
Timeline
  • 20 DEC 15:00Z
    The ESXi Host Client in VMware ESXi (6.5 before ESXi650-201712103-SG, 5.5 before ESXi600-201711103-SG and 5.5 before ESXi550-201709102-SG) contains a…
    cvelistv5