CVE-2020-3997 in Horizon Server

Résumé

par MITRE • 23/10/2020

VMware Horizon Server (7.x prior to 7.10.3 or 7.13.0) contains a Cross Site Scripting (XSS) vulnerability. Successful exploitation of this issue may allow an attacker to inject malicious script which will be executed.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Réserver: 30/12/2019
• Divulgation: 23/10/2020
• Modérer: accepté
• Entrée: VDB-163629
• CPE: prêt
• CWE: CWE-79 (confirmé)
• CVSS: 5.4 (NVD)
• EPSS: 0.00670
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-3997
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-3997
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-3997/