Количество 3
Количество 3
CVE-2019-5514
VMware VMware Fusion (11.x before 11.0.3) contains a security vulnerability due to certain unauthenticated APIs accessible through a web socket. An attacker may exploit this issue by tricking the host user to execute a JavaScript to perform unauthorized functions on the guest machine where VMware Tools is installed. This may further be exploited to execute commands on the guest machines.
GHSA-6vc3-crc6-4w78
VMware VMware Fusion (11.x before 11.0.3) contains a security vulnerability due to certain unauthenticated APIs accessible through a web socket. An attacker may exploit this issue by tricking the host user to execute a JavaScript to perform unauthorized functions on the guest machine where VMware Tools is installed. This may further be exploited to execute commands on the guest machines.
BDU:2019-02473
Уязвимость программного интерфейса гипервизора VMware Fusion, позволяющая нарушителю выполнить произвольный JavaScript-код или выполнить произвольные команды
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2019-5514 VMware VMware Fusion (11.x before 11.0.3) contains a security vulnerability due to certain unauthenticated APIs accessible through a web socket. An attacker may exploit this issue by tricking the host user to execute a JavaScript to perform unauthorized functions on the guest machine where VMware Tools is installed. This may further be exploited to execute commands on the guest machines. | CVSS3: 8.8 | 1% Низкий | почти 7 лет назад |
| GHSA-6vc3-crc6-4w78 VMware VMware Fusion (11.x before 11.0.3) contains a security vulnerability due to certain unauthenticated APIs accessible through a web socket. An attacker may exploit this issue by tricking the host user to execute a JavaScript to perform unauthorized functions on the guest machine where VMware Tools is installed. This may further be exploited to execute commands on the guest machines. | CVSS3: 8.8 | 1% Низкий | больше 3 лет назад |
 | BDU:2019-02473 Уязвимость программного интерфейса гипервизора VMware Fusion, позволяющая нарушителю выполнить произвольный JavaScript-код или выполнить произвольные команды | CVSS3: 8.8 | 1% Низкий | почти 7 лет назад |
Уязвимостей на страницу