CVE-2019-5514

VMware VMware Fusion (11.x before 11.0.3) contains a security vulnerability due to certain unauthenticated APIs accessible through a web socket

published April 1, 2019

CVSS
—
EPSS
3%
Percentile
89.1
In the wild
Unconfirmed
What it is

VMware VMware Fusion (11.x before 11.0.3) contains a security vulnerability due to certain unauthenticated APIs accessible through a web socket. An attacker may exploit this issue by tricking the host user to execute a JavaScript to perform unauthorized functions on the guest machine where VMware Tools is installed. This may further be exploited to execute commands on the guest machines.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03484 · 89.1th percentile
Published
2019-04-01T20:21Z
EPSS history
Timeline
  • 01 APR 20:21Z
    VMware VMware Fusion (11.x before 11.0.3) contains a security vulnerability due to certain unauthenticated APIs accessible through a web socket
    cvelistv5