← Back

CVE-2020-3955

nvd nist
Published: Apr 29, 2020Modified: Nov 21, 2024

JSON object

Loading...
9.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
Exploitability: 2.8 / Impact: 5.8
Source: NVD

Description

ESXi 6.5 without patch ESXi650-201912104-SG and ESXi 6.7 without patch ESXi670-202004103-SG do not properly neutralize script-related HTML when viewing virtual machines attributes. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 8.3.

Affected (179)

Products: Vmware: Esxi
Vmware
1 product
Esxi
Configuration A
45 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Esxi
Version 6.5
Esxi
Version 6.5 2
Esxi
Version 6.5 650-201701001
Esxi
Version 6.5 650-201703001
Esxi
Version 6.5 650-201703002
Esxi
Version 6.5 650-201704001
Esxi
Version 6.5 650-201707101
Esxi
Version 6.5 650-201707102
Esxi
Version 6.5 650-201707103
Esxi
Version 6.5 650-201707201
Esxi
Version 6.5 650-201707202
Esxi
Version 6.5 650-201707203
Esxi
Version 6.5 650-201707204
Esxi
Version 6.5 650-201707205
Esxi
Version 6.5 650-201707206
Esxi
Version 6.5 650-201707207
Esxi
Version 6.5 650-201707208
Esxi
Version 6.5 650-201707209
Esxi
Version 6.5 650-201707210
Esxi
Version 6.5 650-201707211
Esxi
Version 6.5 650-201707212
Esxi
Version 6.5 650-201707213
Esxi
Version 6.5 650-201707214
Esxi
Version 6.5 650-201707215
Esxi
Version 6.5 650-201707216
Esxi
Version 6.5 650-201707217
Esxi
Version 6.5 650-201707218
Esxi
Version 6.5 650-201707219
Esxi
Version 6.5 650-201707220
Esxi
Version 6.5 650-201707221
Esxi
Version 6.5 650-201710001
Esxi
Version 6.5 650-201712001
Esxi
Version 6.5 650-201803001
Esxi
Version 6.5 650-201806001
Esxi
Version 6.5 650-201808001
Esxi
Version 6.5 650-201810001
Esxi
Version 6.5 650-201810002
Esxi
Version 6.5 650-201811001
Esxi
Version 6.5 650-201811002
Esxi
Version 6.5 650-201811301
Esxi
Version 6.5 650-201901001
Esxi
Version 6.5 650-201908001
Esxi
Version 6.5 650-201910001
Esxi
Version 6.5 650-20191004001
Esxi
Version 6.5 esxi650-201806401-bg
Configuration B
134 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Esxi
Version 6.7
Esxi
Version 6.7 670-201806001
Esxi
Version 6.7 670-201807001
Esxi
Version 6.7 670-201808001
Esxi
Version 6.7 670-201810001
Esxi
Version 6.7 670-201810101
Esxi
Version 6.7 670-201810102
Esxi
Version 6.7 670-201810103
Esxi
Version 6.7 670-201810201
Esxi
Version 6.7 670-201810202
Esxi
Version 6.7 670-201810203
Esxi
Version 6.7 670-201810204
Esxi
Version 6.7 670-201810205
Esxi
Version 6.7 670-201810206
Esxi
Version 6.7 670-201810207
Esxi
Version 6.7 670-201810208
Esxi
Version 6.7 670-201810209
Esxi
Version 6.7 670-201810210
Esxi
Version 6.7 670-201810211
Esxi
Version 6.7 670-201810212
Esxi
Version 6.7 670-201810213
Esxi
Version 6.7 670-201810214
Esxi
Version 6.7 670-201810215
Esxi
Version 6.7 670-201810216
Esxi
Version 6.7 670-201810217
Esxi
Version 6.7 670-201810218
Esxi
Version 6.7 670-201810219
Esxi
Version 6.7 670-201810220
Esxi
Version 6.7 670-201810221
Esxi
Version 6.7 670-201810222
Esxi
Version 6.7 670-201810223
Esxi
Version 6.7 670-201810224
Esxi
Version 6.7 670-201810225
Esxi
Version 6.7 670-201810226
Esxi
Version 6.7 670-201810227
Esxi
Version 6.7 670-201810228
Esxi
Version 6.7 670-201810229
Esxi
Version 6.7 670-201810230
Esxi
Version 6.7 670-201810231
Esxi
Version 6.7 670-201810232
Esxi
Version 6.7 670-201810233
Esxi
Version 6.7 670-201810234
Esxi
Version 6.7 670-201811001
Esxi
Version 6.7 670-201901001
Esxi
Version 6.7 670-201901401
Esxi
Version 6.7 670-201901402
Esxi
Version 6.7 670-201901403
Esxi
Version 6.7 670-201903001
Esxi
Version 6.7 670-201904001
Esxi
Version 6.7 670-201904201-ug
Esxi
Version 6.7 670-201904201
Esxi
Version 6.7 670-201904202-ug
Esxi
Version 6.7 670-201904202
Esxi
Version 6.7 670-201904203-ug
Esxi
Version 6.7 670-201904203
Esxi
Version 6.7 670-201904204-ug
Esxi
Version 6.7 670-201904204
Esxi
Version 6.7 670-201904205-ug
Esxi
Version 6.7 670-201904205
Esxi
Version 6.7 670-201904206-ug
Esxi
Version 6.7 670-201904206
Esxi
Version 6.7 670-201904207-ug
Esxi
Version 6.7 670-201904207
Esxi
Version 6.7 670-201904208-ug
Esxi
Version 6.7 670-201904208
Esxi
Version 6.7 670-201904209-ug
Esxi
Version 6.7 670-201904209
Esxi
Version 6.7 670-201904210-ug
Esxi
Version 6.7 670-201904210
Esxi
Version 6.7 670-201904211-ug
Esxi
Version 6.7 670-201904211
Esxi
Version 6.7 670-201904212-ug
Esxi
Version 6.7 670-201904212
Esxi
Version 6.7 670-201904213-ug
Esxi
Version 6.7 670-201904213
Esxi
Version 6.7 670-201904214-ug
Esxi
Version 6.7 670-201904214
Esxi
Version 6.7 670-201904215-ug
Esxi
Version 6.7 670-201904215
Esxi
Version 6.7 670-201904216-ug
Esxi
Version 6.7 670-201904216
Esxi
Version 6.7 670-201904217-ug
Esxi
Version 6.7 670-201904217
Esxi
Version 6.7 670-201904218-ug
Esxi
Version 6.7 670-201904218
Esxi
Version 6.7 670-201904219-ug
Esxi
Version 6.7 670-201904219
Esxi
Version 6.7 670-201904220-ug
Esxi
Version 6.7 670-201904220
Esxi
Version 6.7 670-201904221-ug
Esxi
Version 6.7 670-201904221
Esxi
Version 6.7 670-201904222-ug
Esxi
Version 6.7 670-201904222
Esxi
Version 6.7 670-201904223-ug
Esxi
Version 6.7 670-201904223
Esxi
Version 6.7 670-201904224-ug
Esxi
Version 6.7 670-201904224
Esxi
Version 6.7 670-201904225-ug
Esxi
Version 6.7 670-201904225
Esxi
Version 6.7 670-201904226-ug
Esxi
Version 6.7 670-201904226
Esxi
Version 6.7 670-201904227-ug
Esxi
Version 6.7 670-201904227
Esxi
Version 6.7 670-201904228-ug
Esxi
Version 6.7 670-201904228
Esxi
Version 6.7 670-201904229-ug
Esxi
Version 6.7 670-201904229
Esxi
Version 6.7 670-201905001
Esxi
Version 6.7 670-201906002
Esxi
Version 6.7 670-201908101
Esxi
Version 6.7 670-201908102
Esxi
Version 6.7 670-201908103
Esxi
Version 6.7 670-201908104
Esxi
Version 6.7 670-201908201
Esxi
Version 6.7 670-201908202
Esxi
Version 6.7 670-201908203
Esxi
Version 6.7 670-201908204
Esxi
Version 6.7 670-201908205
Esxi
Version 6.7 670-201908206
Esxi
Version 6.7 670-201908207
Esxi
Version 6.7 670-201908208
Esxi
Version 6.7 670-201908209
Esxi
Version 6.7 670-201908210
Esxi
Version 6.7 670-201908211
Esxi
Version 6.7 670-201908212
Esxi
Version 6.7 670-201908213
Esxi
Version 6.7 670-201908214
Esxi
Version 6.7 670-201908215
Esxi
Version 6.7 670-201908216
Esxi
Version 6.7 670-201908217
Esxi
Version 6.7 670-201908218
Esxi
Version 6.7 670-201908219
Esxi
Version 6.7 670-201908220
Esxi
Version 6.7 670-201908221

Related CWEs

CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (2)

Source: security@vmware.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.