CVE-2018-6958

Опубликовано: 13 апр. 2018

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

VMware vRealize Automation (vRA) prior to 7.3.1 contains a vulnerability that may allow for a DOM-based cross-site scripting (XSS) attack. Exploitation of this issue may lead to the compromise of the vRA user's workstation.

Ссылки

http://www.securityfocus.com/bid/103752
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040676
Third Party Advisory
VDB Entry
http://www.vmware.com/security/advisories/VMSA-2018-0009.html
Vendor Advisory
http://www.securityfocus.com/bid/103752
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040676
Third Party Advisory
VDB Entry
http://www.vmware.com/security/advisories/VMSA-2018-0009.html
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:vmware:vrealize_automation:*:*:*:*:*:*:*:*

Версия до 7.3.1 (исключая)

EPSS

Процентиль: 45%

0.00222

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-hvxm-j3vp-wx4q