Vulnerability Database

300,445

Total vulnerabilities in the database

CVE-2017-4919

VMware vCenter Server 5.5, 6.0, 6.5 allows vSphere users with certain, limited vSphere privileges to use the VIX API to access Guest Operating Systems without the need to authenticate.

Published: Jul 28, 2017
Updated: Nov 9, 2025
CVE: CVE-2017-4919
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 6.8
AV:N/AC:M/Au:N/C:P/I:P/A:P

CWEs:

CWE-306

Affected Software
References

Software	From	Fixed in
vmware / vcenter_server	5.5	5.5.x
vmware / vcenter_server	6.5	6.5.x
vmware / vcenter_server	6.0	6.0.x

http://www.securityfocus.com/bid/100102
http://www.securitytracker.com/id/1039004
http://www.vmware.com/security/advisories/VMSA-2017-0012.html

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo