Medium severity6.1NVD Advisory· Published Dec 20, 2017· Updated May 13, 2026
CVE-2017-4940
CVE-2017-4940
Description
The ESXi Host Client in VMware ESXi (6.5 before ESXi650-201712103-SG, 5.5 before ESXi600-201711103-SG and 5.5 before ESXi550-201709102-SG) contains a vulnerability that may allow for stored cross-site scripting (XSS). An attacker can exploit this vulnerability by injecting Javascript, which might get executed when other users access the Host Client.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.securitytracker.com/id/1040024nvdThird Party AdvisoryVDB Entry
- www.vmware.com/security/advisories/VMSA-2017-0021.htmlnvdVendor Advisory
News mentions
0No linked articles in our index yet.