High severity8.8NVD Advisory· Published Jan 29, 2018· Updated Jun 17, 2026

CVE-2017-4951

Description

VMware AirWatch Console (9.2.x before 9.2.2 and 9.1.x before 9.1.5) contains a Cross Site Request Forgery vulnerability when accessing the App Catalog. An attacker may exploit this issue by tricking users into installing a malicious application on their devices.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

VMware/Airwatch2 versions
cpe:2.3:a:vmware:airwatch:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:vmware:airwatch:*:*:*:*:*:*:*:*range: >=9.1,<9.1.5
- (no CPE)range: 9.2.x before 9.2.2

Patches

Vulnerability mechanics

References

www.vmware.com/security/advisories/VMSA-2018-0006.htmlnvdPatchVendor Advisory
www.securityfocus.com/bid/102849nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1040288nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000