Not rated
CVE-2017-4926 VMware vCenter Server (6.5 prior to 6.5 U1) contains a vulnerability that may allow for stored cross-site scripting…
Description
VMware vCenter Server (6.5 prior to 6.5 U1) contains a vulnerability that may allow for stored cross-site scripting (XSS). An attacker with VC user privileges can inject malicious java-scripts which will get executed when other VC users access the page.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| vCenter Server | Versions not published |
Other CVEs of vCenter Server
The 6 CVEs of vCenter Server →
CVE-2025-41228
VMware ESXi and vCenter Server contain a reflected cross-site scripting vulnerability due to improper input…
4.3
Medium
CVE-2025-41225
The vCenter Server contains an authenticated command-execution vulnerability. A malicious actor with privileges to…
8.8
High
CVE-2019-5532
VMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j) contains an information…
Not rated
CVE-2019-5534
VMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j) contains an information…
Not rated