Unscored severity · published Apr 1, 2010
CVE-2010-1137
Cross-site scripting (XSS) vulnerability in WebAccess in VMware VirtualCenter 2.0.2 and 2.5 and VMware ESX 3.0.3 and 3.5, and the Server Console in VMware Server 1.0, allows…
–
CVSS
2.4%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in WebAccess in VMware VirtualCenter 2.0.2 and 2.5 and VMware ESX 3.0.3 and 3.5, and the Server Console in VMware Server 1.0, allows remote attackers to inject arbitrary web script or HTML via the name of a virtual machine.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ES
Esx Server · Vmware
3.0.3; 3.5 · source: NVD
SE
Server · Vmware
1.0 · source: NVD
VI
Virtualcenter · Vmware
2.0.2; 2.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-1137
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-1137
Patch
http://lists.vmware.com/pipermail/security-announce/2010/000086.html
security.gentoo.org
http://security.gentoo.org/glsa/glsa-201209-25.xml
www.securityfocus.com
http://www.securityfocus.com/bid/39037
www.securitytracker.com
http://www.securitytracker.com/id?1023769
Patch
http://www.vmware.com/security/advisories/VMSA-2010-0005.html
oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6863
More from Esx Server
–
CVE-2010-0686
WebAccess in VMware VirtualCenter 2.0.2 and 2.5, VMware Server 2.0, and VMware ESX 3.0.3 and 3.5 allows remote attackers to leverage proxy-server functionality to spoof the origin…
–
CVE-2009-2277
Cross-site scripting (XSS) vulnerability in WebAccess in VMware VirtualCenter 2.0.2 and 2.5 and VMware ESX 3.0.3 and 3.5 allows remote attackers to inject arbitrary web script or…
–
CVE-2009-3731
Multiple cross-site scripting (XSS) vulnerabilities in WebWorks Help 2.0 through 5.0 in VMware vCenter 4.0 before Update 1 Build 208156; VMware Server 2.0.2; VMware ESX 4.0;…
–
CVE-2008-2100
Multiple buffer overflows in VIX API 1.1.x before 1.1.4 build 93057 on VMware Workstation 5.x and 6.x, VMware Player 1.x and 2.x, VMware ACE 2.x, VMware Server 1.x, VMware Fusion…
–
CVE-2008-0967
Untrusted search path vulnerability in vmware-authd in VMware Workstation 5.x before 5.5.7 build 91707 and 6.x before 6.0.4 build 93057, VMware Player 1.x before 1.0.7 build 91707…