Unscored severity · published Mar 16, 2012
CVE-2012-1511
Cross-site scripting (XSS) vulnerability in View Manager Portal in VMware View before 4.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL
–
CVSS
2%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in View Manager Portal in VMware View before 4.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VI
View · Vmware
through 4.6.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-1511
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-1511
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2012-03/0071.html
osvdb.org
http://osvdb.org/80118
secunia.com
http://secunia.com/advisories/48379
www.securityfocus.com
http://www.securityfocus.com/bid/52526
www.securitytracker.com
http://www.securitytracker.com/id?1026814
Vendor Advisory
http://www.vmware.com/security/advisories/VMSA-2012-0004.html
More from View
–
CVE-2013-1406
The Virtual Machine Communication Interface (VMCI) implementation in vmci.sys in VMware Workstation 8.x before 8.0.5 and 9.x before 9.0.1 on Windows, VMware Fusion 4.1 before…
–
CVE-2012-5978
Multiple directory traversal vulnerabilities in the (1) View Connection Server and (2) View Security Server in VMware View 4.x before 4.6.2 and 5.x before 5.1.2 allow remote…
–
CVE-2012-1666
Untrusted search path vulnerability in VMware Tools in VMware Workstation before 8.0.4, VMware Player before 4.0.4, VMware Fusion before 4.1.2, VMware View before 5.1, and VMware…
–
CVE-2012-1510
Buffer overflow in the WDDM display driver in VMware ESXi 4.0, 4.1, and 5.0; VMware ESX 4.0 and 4.1; and VMware View before 4.6.1 allows guest OS users to gain guest OS privileges…
–
CVE-2012-1509
Buffer overflow in the XPDM display driver in VMware View before 4.6.1 allows guest OS users to gain guest OS privileges via unspecified vectors
