CVE-2017-4929

moderate-risk
Published 2017-11-17

VMware NSX Edge (6.2.x before 6.2.9 and 6.3.x before 6.3.5) contains a moderate Cross-Site Scripting (XSS) issue which may lead to information disclosure.

Do I need to act?

-
0.22% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
6
CVSS 6.1/10 Medium
NETWORK / LOW complexity

Affected Products (14)

Nsx Edge
Nsx Edge
Nsx Edge
Nsx Edge
Nsx Edge
Nsx Edge
Nsx Edge
Nsx Edge
Nsx Edge
Nsx Edge
Nsx Edge
Nsx Edge
Nsx Edge
Nsx Edge

Affected Vendors

Vmware

References (6)

Third Party Advisory http://www.securityfocus.com/bid/101891
Third Party Advisory http://www.securitytracker.com/id/1039837
Patch https://www.vmware.com/security/advisories/VMSA-2017-0019.html
Third Party Advisory http://www.securityfocus.com/bid/101891
Third Party Advisory http://www.securitytracker.com/id/1039837
Patch https://www.vmware.com/security/advisories/VMSA-2017-0019.html
42
/ 100
moderate-risk
Severity 23/34 · High
Exploitability 1/34 · Minimal
Exposure 18/34 · Moderate