CVE-2010-1143

2010-05-0718:24:15

CWE-79

mitre

web.nvd.nist.gov

cve-2010-1143

cross-site scripting

xss

vmware view

virtual desktop manager

vdm

vulnerability

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.004

Percentile

74.3%

JSON

Cross-site scripting (XSS) vulnerability in VMware View (formerly Virtual Desktop Manager or VDM) 3.1.x before 3.1.3 build 252693 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

Nvd

Node

vmwareview_managerMatch3.1.1

vmwareview_managerMatch3.1.2

vmwareview_managerMatch3.1.3

VendorProductVersionCPE
vmwareview_manager3.1.1cpe:2.3:a:vmware:view_manager:3.1.1:*:*:*:*:*:*:*
vmwareview_manager3.1.2cpe:2.3:a:vmware:view_manager:3.1.2:*:*:*:*:*:*:*
vmwareview_manager3.1.3cpe:2.3:a:vmware:view_manager:3.1.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
vmware	view_manager	3.1.1	cpe:2.3:a:vmware:view_manager:3.1.1:::::::*
vmware	view_manager	3.1.2	cpe:2.3:a:vmware:view_manager:3.1.2:::::::*
vmware	view_manager	3.1.3	cpe:2.3:a:vmware:view_manager:3.1.3:::::::*