VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Aug 21, 2020· Updated Jun 17, 2026

CVE-2020-3975

CVE-2020-3975

Description

VMware App Volumes 2.x prior to 2.18.6 and VMware App Volumes 4 prior to 2006 contain a Stored Cross-Site Scripting (XSS) vulnerability. A malicious actor with access to create and edit applications or create storage groups, may be able to inject malicious script which will be executed by a victim's browser when viewing.

Affected products

3
  • VMware/App Volumesdescription
  • VMware/App Volumesllm-fuzzy2 versions
    <2.18.6, <2006+ 1 more
    • (no CPE)range: <2.18.6, <2006
    • cpe:2.3:a:vmware:app_volumes:*:*:*:*:*:*:*:*range: >=2.0,<2.18.6

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.