description: The vCenter Server contains a reflected cross-site scripting vulnerability due to a lack of input sanitization. An attacker may exploit this issue to execute malicious scripts by tricking a victim into clicking a malicious link.
problem types: Reflected XSS vulnerability
affected:
{
product: VMware vCenter Server, VMware Cloud Foundation
vendor: n/a
versions:
status: affected, version: VMware vCenter Server 6.7 before 6.7 U3o and VMware Cloud Foundation 3.x before 3.10.2.2
}