cbcvebase.
CVE-2020-3955
published 2020-04-29

CVE-2020-3955: ESXi 6.5 without patch ESXi650-201912104-SG and ESXi 6.7 without patch ESXi670-202004103-SG do not properly neutralize script-related HTML when viewing virtual…

critical9.3CVSS 3.1
AVNACLPRNUIRSCCHIHAN
ESXi 6.5 without patch ESXi650-201912104-SG and ESXi 6.7 without patch ESXi670-202004103-SG do not properly neutralize script-related HTML when viewing virtual machines attributes. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 8.3.

Affected

4 ranges
VendorProductVersion rangeFixed in
vmwareesxi——
vmwareesxi——
vmwareesxi——
vmwareesxi——