CVE-2016-2078: XSS

Published Jun 8, 2016

Updated

Cross-site scripting (XSS) vulnerability in the Web Client in VMware vCenter Server 5.1 before update 3d, 5.5 before update 3d, and 6.0 before update 2 on Windows allows remote attackers to inject arbitrary web script or HTML via the flashvars parameter.

Affected Software

5 affected components

Microsoft Windows

VMware vCenter Server=5.1

VMware vCenter Server=5.5

VMware vCenter Server=6.0

VMware vCenter Server=5.0

Event History

Jun 8, 2016

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-2078?

CVE-2016-2078 is classified as a high severity vulnerability due to its potential for exploitation via cross-site scripting.

How do I fix CVE-2016-2078?

To mitigate CVE-2016-2078, upgrade VMware vCenter Server to version 5.1 update 3d, 5.5 update 3d, or 6.0 update 2 or later.

What systems are affected by CVE-2016-2078?

CVE-2016-2078 affects VMware vCenter Server versions 5.1, 5.5, and 6.0 prior to their respective updates.

What type of vulnerability is CVE-2016-2078?

CVE-2016-2078 is a cross-site scripting (XSS) vulnerability allowing remote attackers to inject arbitrary web scripts or HTML.

Is CVE-2016-2078 critical for my VMware environment?

Yes, CVE-2016-2078 poses a critical risk to your VMware environment if not properly addressed and mitigated.