Cross-site scripting (XSS) vulnerability in the Host Client in VMware vSphere Hypervisor (aka ESXi) 5.5 and 6.0 allows remote authenticated users to inject arbitrary web script or HTML via a crafted VM.
| Software | From | Fixed in |
|---|---|---|
| vmware / esxi | 5.5 | 5.5.x |
| vmware / esxi | 6.0 | 6.0.x |