CVE-2018-6958

VMware vRealize Automation (vRA) prior to 7.3.1 contains a vulnerability that may allow for a DOM-based cross-site scripting (XSS) attack

published April 13, 2018

CVSS
—
EPSS
1%
Percentile
63.6
In the wild
Unconfirmed
What it is

VMware vRealize Automation (vRA) prior to 7.3.1 contains a vulnerability that may allow for a DOM-based cross-site scripting (XSS) attack. Exploitation of this issue may lead to the compromise of the vRA user's workstation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01042 · 63.6th percentile
Published
2018-04-13T13:00Z
EPSS history
Timeline
  • 13 APR 13:00Z
    VMware vRealize Automation (vRA) prior to 7.3.1 contains a vulnerability that may allow for a DOM-based cross-site scripting (XSS) attack
    cvelistv5