description: ESXi 6.5 without patch ESXi650-201912104-SG and ESXi 6.7 without patch ESXi670-202004103-SG do not properly neutralize script-related HTML when viewing virtual machines attributes. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 8.3.
problem types: Stored Cross-Site-Scripting (XSS)
affected:
{
product: ESXi
vendor: VMware
versions:
status: affected, version: ESXi 6.5 without patch ESXi650-201912104-SG
status: affected, version: ESXi 6.7 without patch ESXi670-202004103-SG
}