CVE-2017-4929

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

VMware NSX Edge (6.2.x before 6.2.9 and 6.3.x before 6.3.5) contains a moderate Cross-Site Scripting (XSS) issue which may lead to information disclosure.

Metrics

CVSS 3.0 6.1/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
VMware	NSX Edge	6.2.x before 6.2.9; 6.3.x before 6.3.5

References

http://www.securityfocus.com/bid/101891Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1039837Third Party Advisory, VDB Entry
https://www.vmware.com/security/advisories/VMSA-2017-0019.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/101891Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1039837Third Party Advisory, VDB Entry
https://www.vmware.com/security/advisories/VMSA-2017-0019.htmlPatch, Vendor Advisory

Timeline

Published: Nov 17, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-49305.4VMware AirWatch Console 9.x prior to 9.2.0 contains a vulnerability that could allow an authenticated AWC user to add a malicious URL to an CVE-2017-49317.8VMware AirWatch Console 9.x prior to 9.2.0 contains a vulnerability that could allow an authenticated AWC user to add malicious data to an e CVE-2017-49327.8VMware AirWatch Launcher for Android prior to 3.2.2 contains a vulnerability that could allow an escalation of privilege from the launcher U CVE-2017-49338.8VMware ESXi (6.5 before ESXi650-201710401-BG), Workstation (12.x before 12.5.8), and Fusion (8.x before 8.5.9) contain a vulnerability that CVE-2017-49348.8VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a heap buffer-overflow vulnerability in VMNAT device. This iss CVE-2017-49357.8VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds write vulnerability CVE-2017-49367.8VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds read vulnerability i CVE-2017-49377.8VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds read vulnerability i CVE-2017-49386.5VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a guest RPC NULL pointer dereference vulnerability. Successful CVE-2017-49397.8VMware Workstation (12.x before 12.5.8) installer contains a DLL hijacking issue that exists due to some DLL files loaded by the application CVE-2017-49406.1The ESXi Host Client in VMware ESXi (6.5 before ESXi650-201712103-SG, 5.5 before ESXi600-201711103-SG and 5.5 before ESXi550-201709102-SG) c CVE-2017-49418.8VMware ESXi (6.0 before ESXi600-201711101-SG, 5.5 ESXi550-201709101-SG), Workstation (12.x before 12.5.8), and Fusion (8.x before 8.5.9) con