VulnerabilityModified
CVE-2005-4583
Unspecified vulnerability in the Management Interface in VMware ESX Server 2.x up to 2.5.x before 24 December 2005 allows "remote code execution in the Web browser" via unspecified attack vectors, probably related to cross-site scripting (XSS).
MEDIUM 4.3EPSS 3.60%
Does this matter?
Lower severity and a low EPSS score (3.60%). Track it; it rarely justifies an emergency change on its own.
Description
Unspecified vulnerability in the Management Interface in VMware ESX Server 2.x up to 2.5.x before 24 December 2005 allows "remote code execution in the Web browser" via unspecified attack vectors, probably related to cross-site scripting (XSS).
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 3.60% probability · 89th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- vmware/esx
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/18250Patch, Vendor Advisory
- http://securitytracker.com/id?1015422Exploit, Patch
- http://www.osvdb.org/22119Patch
- http://www.securityfocus.com/bid/16086Patch
- http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=2001Patch
- http://www.vupen.com/english/advisories/2005/3084Vendor Advisory
- http://secunia.com/advisories/18250Patch, Vendor Advisory
- http://securitytracker.com/id?1015422Exploit, Patch
- http://www.osvdb.org/22119Patch
- http://www.securityfocus.com/bid/16086Patch
- http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=2001Patch
- http://www.vupen.com/english/advisories/2005/3084Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.