Cross Site Scripting Vulnerability in VMware vRealize Log Insight
CVE-2020-3953

4.8MEDIUM

Key Information:

Vendor

Vmware
Status
Vmware Vrealize Log Insight
Vendor
CVE Published:
15 April 2020

What is CVE-2020-3953?

A Cross Site Scripting (XSS) vulnerability exists in VMware vRealize Log Insight versions prior to 8.1.0 due to improper input validation. This flaw could allow an attacker to inject malicious scripts into web pages viewed by users, potentially leading to unauthorized actions or data exposure.

Affected Version(s)

VMware vRealize Log Insight VMware vRealize Log Insight prior to 8.1.0

References

https://www.vmware.com/security/advisories/VMSA-2020-0007...
x_refsource_MISC

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.