Xxe

2022-05-2419:15:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.2%

JSON

VMware Tools for Windows(12.0.0, 11.x.y and 10.x.y) contains an XML External Entity (XXE) vulnerability. A malicious actor with non-administrative local user privileges in the Windows guest OS, where VMware Tools is installed, may exploit this issue leading to a denial-of-service condition or unintended information disclosure.

CPENameOperatorVersion
toolsge10.0.0
toolsle10.3.24
toolsge11.0.0
toolsle11.3.5
toolsge12.0.0
toolslt12.0.5

Name	Operator	Version
tools	ge	10.0.0
tools	le	10.3.24
tools	ge	11.0.0
tools	le	11.3.5
tools	ge	12.0.0
tools	lt	12.0.5

References

www.vmware.com/security/advisories/VMSA-2022-0015.html