Vulnerability Database

300,445

Total vulnerabilities in the database

CVE-2017-4926

VMware vCenter Server (6.5 prior to 6.5 U1) contains a vulnerability that may allow for stored cross-site scripting (XSS). An attacker with VC user privileges can inject malicious java-scripts which will get executed when other VC users access the page.

  • Published: Sep 15, 2017
  • Updated: Nov 9, 2025
  • CVE: CVE-2017-4926
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 3.5
  • AV:N/AC:M/Au:S/C:N/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
vmware / vcenter_server 6.5 6.5.x