CVE-2020-3955

ESXi 6.5 without patch ESXi650-201912104-SG and ESXi 6.7 without patch ESXi670-202004103-SG do not properly neutralize script-related HTML when viewing virtual machines attributes. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 8.3.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.3 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
vmwareCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 85%
VendorProductVersion
vmwareesxi
6.5
vmwareesxi
6.5:2
vmwareesxi
6.5:650-201701001
vmwareesxi
6.5:650-201703001
vmwareesxi
6.5:650-201703002
vmwareesxi
6.5:650-201704001
vmwareesxi
6.5:650-201707101
vmwareesxi
6.5:650-201707102
vmwareesxi
6.5:650-201707103
vmwareesxi
6.5:650-201707201
vmwareesxi
6.5:650-201707202
vmwareesxi
6.5:650-201707203
vmwareesxi
6.5:650-201707204
vmwareesxi
6.5:650-201707205
vmwareesxi
6.5:650-201707206
vmwareesxi
6.5:650-201707207
vmwareesxi
6.5:650-201707208
vmwareesxi
6.5:650-201707209
vmwareesxi
6.5:650-201707210
vmwareesxi
6.5:650-201707211
vmwareesxi
6.5:650-201707212
vmwareesxi
6.5:650-201707213
vmwareesxi
6.5:650-201707214
vmwareesxi
6.5:650-201707215
vmwareesxi
6.5:650-201707216
vmwareesxi
6.5:650-201707217
vmwareesxi
6.5:650-201707218
vmwareesxi
6.5:650-201707219
vmwareesxi
6.5:650-201707220
vmwareesxi
6.5:650-201707221
vmwareesxi
6.5:650-201710001
vmwareesxi
6.5:650-201712001
vmwareesxi
6.5:650-201803001
vmwareesxi
6.5:650-201806001
vmwareesxi
6.5:650-201808001
vmwareesxi
6.5:650-201810001
vmwareesxi
6.5:650-201810002
vmwareesxi
6.5:650-201811001
vmwareesxi
6.5:650-201811002
vmwareesxi
6.5:650-201811301
vmwareesxi
6.5:650-201901001
vmwareesxi
6.5:650-201908001
vmwareesxi
6.5:650-201910001
vmwareesxi
6.5:650-20191004001
vmwareesxi
6.5:esxi650-201806401-bg
vmwareesxi
6.7
vmwareesxi
6.7:670-201806001
vmwareesxi
6.7:670-201807001
vmwareesxi
6.7:670-201808001
vmwareesxi
6.7:670-201810001
vmwareesxi
6.7:670-201810101
vmwareesxi
6.7:670-201810102
vmwareesxi
6.7:670-201810103
vmwareesxi
6.7:670-201810201
vmwareesxi
6.7:670-201810202
vmwareesxi
6.7:670-201810203
vmwareesxi
6.7:670-201810204
vmwareesxi
6.7:670-201810205
vmwareesxi
6.7:670-201810206
vmwareesxi
6.7:670-201810207
vmwareesxi
6.7:670-201810208
vmwareesxi
6.7:670-201810209
vmwareesxi
6.7:670-201810210
vmwareesxi
6.7:670-201810211
vmwareesxi
6.7:670-201810212
vmwareesxi
6.7:670-201810213
vmwareesxi
6.7:670-201810214
vmwareesxi
6.7:670-201810215
vmwareesxi
6.7:670-201810216
vmwareesxi
6.7:670-201810217
vmwareesxi
6.7:670-201810218
vmwareesxi
6.7:670-201810219
vmwareesxi
6.7:670-201810220
vmwareesxi
6.7:670-201810221
vmwareesxi
6.7:670-201810222
vmwareesxi
6.7:670-201810223
vmwareesxi
6.7:670-201810224
vmwareesxi
6.7:670-201810225
vmwareesxi
6.7:670-201810226
vmwareesxi
6.7:670-201810227
vmwareesxi
6.7:670-201810228
vmwareesxi
6.7:670-201810229
vmwareesxi
6.7:670-201810230
vmwareesxi
6.7:670-201810231
vmwareesxi
6.7:670-201810232
vmwareesxi
6.7:670-201810233
vmwareesxi
6.7:670-201810234
vmwareesxi
6.7:670-201811001
vmwareesxi
6.7:670-201901001
vmwareesxi
6.7:670-201901401
vmwareesxi
6.7:670-201901402
vmwareesxi
6.7:670-201901403
vmwareesxi
6.7:670-201903001
vmwareesxi
6.7:670-201904001
vmwareesxi
6.7:670-201904201
vmwareesxi
6.7:670-201904201-ug
vmwareesxi
6.7:670-201904202
vmwareesxi
6.7:670-201904202-ug
vmwareesxi
6.7:670-201904203
vmwareesxi
6.7:670-201904203-ug
vmwareesxi
6.7:670-201904204
vmwareesxi
6.7:670-201904204-ug
vmwareesxi
6.7:670-201904205
vmwareesxi
6.7:670-201904205-ug
vmwareesxi
6.7:670-201904206
vmwareesxi
6.7:670-201904206-ug
vmwareesxi
6.7:670-201904207
vmwareesxi
6.7:670-201904207-ug
vmwareesxi
6.7:670-201904208
vmwareesxi
6.7:670-201904208-ug
vmwareesxi
6.7:670-201904209
vmwareesxi
6.7:670-201904209-ug
vmwareesxi
6.7:670-201904210
vmwareesxi
6.7:670-201904210-ug
vmwareesxi
6.7:670-201904211
vmwareesxi
6.7:670-201904211-ug
vmwareesxi
6.7:670-201904212
vmwareesxi
6.7:670-201904212-ug
vmwareesxi
6.7:670-201904213
vmwareesxi
6.7:670-201904213-ug
vmwareesxi
6.7:670-201904214
vmwareesxi
6.7:670-201904214-ug
vmwareesxi
6.7:670-201904215
vmwareesxi
6.7:670-201904215-ug
vmwareesxi
6.7:670-201904216
vmwareesxi
6.7:670-201904216-ug
vmwareesxi
6.7:670-201904217
vmwareesxi
6.7:670-201904217-ug
vmwareesxi
6.7:670-201904218
vmwareesxi
6.7:670-201904218-ug
vmwareesxi
6.7:670-201904219
vmwareesxi
6.7:670-201904219-ug
vmwareesxi
6.7:670-201904220
vmwareesxi
6.7:670-201904220-ug
vmwareesxi
6.7:670-201904221
vmwareesxi
6.7:670-201904221-ug
vmwareesxi
6.7:670-201904222
vmwareesxi
6.7:670-201904222-ug
vmwareesxi
6.7:670-201904223
vmwareesxi
6.7:670-201904223-ug
vmwareesxi
6.7:670-201904224
vmwareesxi
6.7:670-201904224-ug
vmwareesxi
6.7:670-201904225
vmwareesxi
6.7:670-201904225-ug
vmwareesxi
6.7:670-201904226
vmwareesxi
6.7:670-201904226-ug
vmwareesxi
6.7:670-201904227
vmwareesxi
6.7:670-201904227-ug
vmwareesxi
6.7:670-201904228
vmwareesxi
6.7:670-201904228-ug
vmwareesxi
6.7:670-201904229
vmwareesxi
6.7:670-201904229-ug
vmwareesxi
6.7:670-201905001
vmwareesxi
6.7:670-201906002
vmwareesxi
6.7:670-201908101
vmwareesxi
6.7:670-201908102
vmwareesxi
6.7:670-201908103
vmwareesxi
6.7:670-201908104
vmwareesxi
6.7:670-201908201
vmwareesxi
6.7:670-201908202
vmwareesxi
6.7:670-201908203
vmwareesxi
6.7:670-201908204
vmwareesxi
6.7:670-201908205
vmwareesxi
6.7:670-201908206
vmwareesxi
6.7:670-201908207
vmwareesxi
6.7:670-201908208
vmwareesxi
6.7:670-201908209
vmwareesxi
6.7:670-201908210
vmwareesxi
6.7:670-201908211
vmwareesxi
6.7:670-201908212
vmwareesxi
6.7:670-201908213
vmwareesxi
6.7:670-201908214
vmwareesxi
6.7:670-201908215
vmwareesxi
6.7:670-201908216
vmwareesxi
6.7:670-201908217
vmwareesxi
6.7:670-201908218
vmwareesxi
6.7:670-201908219
vmwareesxi
6.7:670-201908220
vmwareesxi
6.7:670-201908221
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.vmware.com/security/advisories/VMSA-2020-0008.html
https://www.vmware.com/security/advisories/VMSA-2020-0008.html