CVE-2012-1511

Cross-site scripting (XSS) vulnerability in View Manager Portal in VMware View before 4.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 52%
VendorProductVersion
vmwareview
𝑥
≤ 4.6.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
vmware-view-open-client
zesty
dne
yakkety
dne
xenial
dne
wily
dne
vivid
dne
utopic
dne
trusty
dne
saucy
ignored
raring
ignored
quantal
ignored
precise
ignored
oneiric
ignored
natty
ignored
maverick
ignored
lucid
ignored
hardy
dne
Common Weakness Enumeration
References
http://archives.neohapsis.com/archives/bugtraq/2012-03/0071.html
http://osvdb.org/80118
http://secunia.com/advisories/48379
http://www.securityfocus.com/bid/52526
http://www.securitytracker.com/id?1026814
http://www.vmware.com/security/advisories/VMSA-2012-0004.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16664
http://archives.neohapsis.com/archives/bugtraq/2012-03/0071.html
http://osvdb.org/80118
http://secunia.com/advisories/48379
http://www.securityfocus.com/bid/52526
http://www.securitytracker.com/id?1026814
http://www.vmware.com/security/advisories/VMSA-2012-0004.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16664