CVE-2020-3997 in Horizon Server

Tóm tắt

Bởi MITRE • 23/10/2020

VMware Horizon Server (7.x prior to 7.10.3 or 7.13.0) contains a Cross Site Scripting (XSS) vulnerability. Successful exploitation of this issue may allow an attacker to inject malicious script which will be executed.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Đặt trước: 30/12/2019
• Tiết lộ: 23/10/2020
• Kiểm duyệt: được chấp nhận
• mục: VDB-163629
• CPE: sẵn sàng
• CWE: CWE-79 (Đã xác nhận)
• CVSS: 5.4 (NVD)
• EPSS: 0.00670
• KEV: không
• Các hoạt động: rất thấp

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-3997
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-3997
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-3997/