CVE-2017-4940
20.12.2017, 15:29
The ESXi Host Client in VMware ESXi (6.5 before ESXi650-201712103-SG, 5.5 before ESXi600-201711103-SG and 5.5 before ESXi550-201709102-SG) contains a vulnerability that may allow for stored cross-site scripting (XSS). An attacker can exploit this vulnerability by injecting Javascript, which might get executed when other users access the Host Client.
| Vendor | Product | Version |
|---|---|---|
| vmware | esxi | 5.5 |
| vmware | esxi | 5.5:1 |
| vmware | esxi | 5.5:2 |
| vmware | esxi | 5.5:3a |
| vmware | esxi | 5.5:3b |
| vmware | esxi | 5.5:550-20170901001s |
| vmware | esxi | 6.0 |
| vmware | esxi | 6.0:1 |
| vmware | esxi | 6.0:1a |
| vmware | esxi | 6.0:1b |
| vmware | esxi | 6.0:2 |
| vmware | esxi | 6.0:3 |
| vmware | esxi | 6.0:3a |
| vmware | esxi | 6.0:600-201504401 |
| vmware | esxi | 6.0:600-201505401 |
| vmware | esxi | 6.0:600-201507101 |
| vmware | esxi | 6.0:600-201507102 |
| vmware | esxi | 6.0:600-201507401 |
| vmware | esxi | 6.0:600-201507402 |
| vmware | esxi | 6.0:600-201507403 |
| vmware | esxi | 6.0:600-201507404 |
| vmware | esxi | 6.0:600-201507405 |
| vmware | esxi | 6.0:600-201507406 |
| vmware | esxi | 6.0:600-201507407 |
| vmware | esxi | 6.0:600-201509101 |
| vmware | esxi | 6.0:600-201509102 |
| vmware | esxi | 6.0:600-201509201 |
| vmware | esxi | 6.0:600-201509202 |
| vmware | esxi | 6.0:600-201509203 |
| vmware | esxi | 6.0:600-201509204 |
| vmware | esxi | 6.0:600-201509205 |
| vmware | esxi | 6.0:600-201509206 |
| vmware | esxi | 6.0:600-201509207 |
| vmware | esxi | 6.0:600-201509208 |
| vmware | esxi | 6.0:600-201509209 |
| vmware | esxi | 6.0:600-201509210 |
| vmware | esxi | 6.0:600-201510401 |
| vmware | esxi | 6.0:600-201511401 |
| vmware | esxi | 6.0:600-201601101 |
| vmware | esxi | 6.0:600-201601102 |
| vmware | esxi | 6.0:600-201601401 |
| vmware | esxi | 6.0:600-201601402 |
| vmware | esxi | 6.0:600-201601403 |
| vmware | esxi | 6.0:600-201601404 |
| vmware | esxi | 6.0:600-201601405 |
| vmware | esxi | 6.0:600-201602401 |
| vmware | esxi | 6.0:600-201603101 |
| vmware | esxi | 6.0:600-201603102 |
| vmware | esxi | 6.0:600-201603201 |
| vmware | esxi | 6.0:600-201603202 |
| vmware | esxi | 6.0:600-201603203 |
| vmware | esxi | 6.0:600-201603204 |
| vmware | esxi | 6.0:600-201603205 |
| vmware | esxi | 6.0:600-201603206 |
| vmware | esxi | 6.0:600-201603207 |
| vmware | esxi | 6.0:600-201603208 |
| vmware | esxi | 6.0:600-201605401 |
| vmware | esxi | 6.0:600-201608101 |
| vmware | esxi | 6.0:600-201608401 |
| vmware | esxi | 6.0:600-201608402 |
| vmware | esxi | 6.0:600-201608403 |
| vmware | esxi | 6.0:600-201608404 |
| vmware | esxi | 6.0:600-201608405 |
| vmware | esxi | 6.0:600-201610410 |
| vmware | esxi | 6.0:600-201611401 |
| vmware | esxi | 6.0:600-201611402 |
| vmware | esxi | 6.0:600-201611403 |
| vmware | esxi | 6.0:600-201702101 |
| vmware | esxi | 6.0:600-201702102 |
| vmware | esxi | 6.0:600-201702201 |
| vmware | esxi | 6.0:600-201702202 |
| vmware | esxi | 6.0:600-201702203 |
| vmware | esxi | 6.0:600-201702204 |
| vmware | esxi | 6.0:600-201702205 |
| vmware | esxi | 6.0:600-201702206 |
| vmware | esxi | 6.0:600-201702207 |
| vmware | esxi | 6.0:600-201702208 |
| vmware | esxi | 6.0:600-201702209 |
| vmware | esxi | 6.0:600-201702210 |
| vmware | esxi | 6.0:600-201702211 |
| vmware | esxi | 6.0:600-201702212 |
| vmware | esxi | 6.0:600-201703401 |
| vmware | esxi | 6.0:600-201706101 |
| vmware | esxi | 6.0:600-201706102 |
| vmware | esxi | 6.0:600-201706103 |
| vmware | esxi | 6.0:600-201706401 |
| vmware | esxi | 6.0:600-201706402 |
| vmware | esxi | 6.0:600-201706403 |
| vmware | esxi | 6.0:600-201710301 |
| vmware | esxi | 6.5 |
| vmware | esxi | 6.5:650-201701001 |
| vmware | esxi | 6.5:650-201703001 |
| vmware | esxi | 6.5:650-201703002 |
| vmware | esxi | 6.5:650-201704001 |
| vmware | esxi | 6.5:650-201707101 |
| vmware | esxi | 6.5:650-201707102 |
| vmware | esxi | 6.5:650-201707103 |
| vmware | esxi | 6.5:650-201707201 |
| vmware | esxi | 6.5:650-201707202 |
| vmware | esxi | 6.5:650-201707203 |
| vmware | esxi | 6.5:650-201707204 |
| vmware | esxi | 6.5:650-201707205 |
| vmware | esxi | 6.5:650-201707206 |
| vmware | esxi | 6.5:650-201707207 |
| vmware | esxi | 6.5:650-201707208 |
| vmware | esxi | 6.5:650-201707209 |
| vmware | esxi | 6.5:650-201707210 |
| vmware | esxi | 6.5:650-201707211 |
| vmware | esxi | 6.5:650-201707212 |
| vmware | esxi | 6.5:650-201707213 |
| vmware | esxi | 6.5:650-201707214 |
| vmware | esxi | 6.5:650-201707215 |
| vmware | esxi | 6.5:650-201707216 |
| vmware | esxi | 6.5:650-201707217 |
| vmware | esxi | 6.5:650-201707218 |
| vmware | esxi | 6.5:650-201707219 |
| vmware | esxi | 6.5:650-201707220 |
| vmware | esxi | 6.5:650-201707221 |
| vmware | esxi | 6.5:650-201710001 |
| vmware | esxi | 6.5:650-201712001 |
𝑥
= Vulnerable software versions