Skip to content
OpenAdvisories
Unscored CVE-2018-6958 EUVD-2018-18702GHSA-hvxm-j3vp-wx4q

VMware vRealize Automation (vRA) prior to 7.3.1 contains a vulnerability that may allow for a DOM-based cross-site scripting (XSS) attack. …

Published Apr 13, 2018 · Updated Sep 17, 2024 · Assigned by vmware

Vendor: VMware Product: vRealize Automation

Description

VMware vRealize Automation (vRA) prior to 7.3.1 contains a vulnerability that may allow for a DOM-based cross-site scripting (XSS) attack. Exploitation of this issue may lead to the compromise of the vRA user's workstation.

Affected products

VendorProductAffectedFixed
VMware vRealize Automation prior to 7.3.1 —

References