Medium severity5.4NVD Advisory· Published Nov 16, 2017· Updated Jun 17, 2026

CVE-2017-4930

Description

VMware AirWatch Console 9.x prior to 9.2.0 contains a vulnerability that could allow an authenticated AWC user to add a malicious URL to an enrolled device's 'Links' page. Successful exploitation of this issue could result in an unsuspecting AWC user being redirected to a malicious URL.

Affected products

VMware/Airwatch2 versions
cpe:2.3:a:vmware:airwatch:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:vmware:airwatch:*:*:*:*:*:*:*:*range: >=9.0.0,<9.2.0
- (no CPE)range: 9.x before 9.2.0

Patches

Vulnerability mechanics

References

www.vmware.com/us/security/advisories/VMSA-2017-0016.htmlnvdPatchVendor Advisory
www.securityfocus.com/bid/101772nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1039750nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000