CVEvulnerability
CVE-2005-4583
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-12-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Unspecified vulnerability in the Management Interface in VMware ESX Server 2.x up to 2.5.x before 24 December 2005 allows "remote code execution in the Web browser" via unspecified attack vectors, probably related to cross-site scripting (XSS).
Affected configurations
• vmware esx 2.0
• vmware esx 2.0.1
• vmware esx 2.1.1
• vmware esx 2.1.2
• vmware esx 2.5
• vmware esx 2.5.2
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/18250 Patch, Vendor Advisory
- http://securitytracker.com/id?1015422 Exploit, Patch
- http://www.osvdb.org/22119 Patch
- http://www.securityfocus.com/bid/16086 Patch
- http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=2001 Patch
- http://www.vupen.com/english/advisories/2005/3084 Vendor Advisory
- http://secunia.com/advisories/18250 Patch, Vendor Advisory
- http://securitytracker.com/id?1015422 Exploit, Patch
- http://www.osvdb.org/22119 Patch
- http://www.securityfocus.com/bid/16086 Patch
- http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=2001 Patch
- http://www.vupen.com/english/advisories/2005/3084 Vendor Advisory