CVE-2020-3975
Medium
Description
VMware App Volumes 2.x prior to 2.18.6 and VMware App Volumes 4 prior to 2006 contain a Stored Cross-Site Scripting (XSS) vulnerability. A malicious actor with access to create and edit applications or create storage groups, may be able to inject malicious script which will be executed by a victim's browser when viewing.
SeverityMedium
CVSS5.4
Exploit probability44. percentile0.5%
Product
Vmware App Volumes
PublishedAug 21, 2020
First seenAug 21, 2020
How to fix
Update
- vmware app_volumes2.18.6, 2006 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vmware app_volumes | 2.0 ≤ v < 2.18.6, 4 ≤ v < 2006 | 2.18.6, 2006 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.