CVE-2020-3955

ESXi 6.5 without patch ESXi650-201912104-SG and ESXi 6.7 without patch ESXi670-202004103-SG do not properly neutralize script-related HTML when viewing virtual machines attributes. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 8.3.

Score

CVSS 3.1 9.3 Critical

Status

Modified - security@vmware.com

Published

2020-04-29

Last modified

2024-08-04

Weaknesses

CWE-79

Affected products

• Esxi (Vmware)

References

• https://www.vmware.com/security/advisories/VMSA-2020-0008.html