← CVE Intelligence

CVE-2020-3955

VMware / ESXi PUBLISHED

Description (CNA)

ESXi 6.5 without patch ESXi650-201912104-SG and ESXi 6.7 without patch ESXi670-202004103-SG do not properly neutralize script-related HTML when viewing virtual machines attributes. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 8.3.

Affected (CNA)

Vendor / productVersions
VMware / ESXiaffected ESXi 6.5 without patch ESXi650-201912104-SG; affected ESXi 6.7 without patch ESXi670-202004103-SG

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.