Description
Cross-site scripting (XSS) vulnerability in the server in VMware vCenter Operations (aka vCOps) before 5.0.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
- http://www.vmware.com/security/advisories/VMSA-2012-0014.html
- 1027612 vdb-entry
- 20121010 VMSA-2012-0014 VMware vCenter Operations, CapacityIQ, and Movie Decoder security updates mailing-list
- vmware-vcenter-xss(79044) vdb-entry
- 85959 vdb-entry
- 50795 third-party-advisory