CVE-2021-22021

VMware vRealize Log Insight (8.x prior to 8.4) contains a Cross Site Scripting (XSS) vulnerability due to improper user input validation

published August 30, 2021

CVSS
—
EPSS
0%
Percentile
39.6
In the wild
Unconfirmed
What it is

VMware vRealize Log Insight (8.x prior to 8.4) contains a Cross Site Scripting (XSS) vulnerability due to improper user input validation. An attacker with user privileges may be able to inject a malicious payload via the Log Insight UI which would be executed when the victim accesses the shared dashboard link.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00468 · 39.6th percentile
Published
2021-08-30T18:06Z
EPSS history
Timeline
  • 30 AUG 18:06Z
    VMware vRealize Log Insight (8.x prior to 8.4) contains a Cross Site Scripting (XSS) vulnerability due to improper user input validation
    cvelistv5