cbcvebase.
CVE-2015-6931
published 2016-07-03

CVE-2015-6931: Cross-site scripting (XSS) vulnerability in the vSphere Web Client in VMware vCenter Server 5.0 before U3g, 5.1 before U3d, and 5.5 before U2d allows remote…

medium6.1CVSS 3.0
AVNACLPRNUIRSCCLILAN
Cross-site scripting (XSS) vulnerability in the vSphere Web Client in VMware vCenter Server 5.0 before U3g, 5.1 before U3d, and 5.5 before U2d allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

Affected

5 ranges
VendorProductVersion rangeFixed in
vmwarevcenter_server
vmwarevcenter_server
vmwarevcenter_server
vmwarevmware_vcenter_server
vmwarevsphere