What is the severity of CVE-2020-3955?

The severity of CVE-2020-3955 is classified as Important, with a maximum CVSSv3 base score.

How do I fix CVE-2020-3955?

To fix CVE-2020-3955, apply the relevant patches ESXi650-201912104-SG for ESXi 6.5 or ESXi670-202004103-SG for ESXi 6.7.

What versions of VMware ESXi are affected by CVE-2020-3955?

CVE-2020-3955 affects VMware ESXi versions 6.5 and 6.7, specifically those without the specified patches.

What kind of vulnerability is CVE-2020-3955?

CVE-2020-3955 is a cross-site scripting (XSS) vulnerability that allows for improper handling of script-related HTML.

Can CVE-2020-3955 be exploited remotely?

Yes, CVE-2020-3955 can potentially be exploited remotely against affected ESXi systems.

Vulnerability/
CVE-2020-3955

critical

9.3

CWE

29/4/2020

4/8/2024

CVE-2020-3955: XSS

First published: Wed Apr 29 2020(Updated: )

ESXi 6.5 without patch ESXi650-201912104-SG and ESXi 6.7 without patch ESXi670-202004103-SG do not properly neutralize script-related HTML when viewing virtual machines attributes. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 8.3.

Credit: security@vmware.com

Affected Software	Affected Version	How to fix
VMware ESXi and Horizon DaaS	=6.5
VMware ESXi and Horizon DaaS	=6.5-2
VMware ESXi and Horizon DaaS	=6.5-650-201701001
VMware ESXi and Horizon DaaS	=6.5-650-201703001
VMware ESXi and Horizon DaaS	=6.5-650-201703002
VMware ESXi and Horizon DaaS	=6.5-650-201704001
VMware ESXi and Horizon DaaS	=6.5-650-201707101
VMware ESXi and Horizon DaaS	=6.5-650-201707102
VMware ESXi and Horizon DaaS	=6.5-650-201707103
VMware ESXi and Horizon DaaS	=6.5-650-201707201
VMware ESXi and Horizon DaaS	=6.5-650-201707202
VMware ESXi and Horizon DaaS	=6.5-650-201707203
VMware ESXi and Horizon DaaS	=6.5-650-201707204
VMware ESXi and Horizon DaaS	=6.5-650-201707205
VMware ESXi and Horizon DaaS	=6.5-650-201707206
VMware ESXi and Horizon DaaS	=6.5-650-201707207
VMware ESXi and Horizon DaaS	=6.5-650-201707208
VMware ESXi and Horizon DaaS	=6.5-650-201707209
VMware ESXi and Horizon DaaS	=6.5-650-201707210
VMware ESXi and Horizon DaaS	=6.5-650-201707211
VMware ESXi and Horizon DaaS	=6.5-650-201707212
VMware ESXi and Horizon DaaS	=6.5-650-201707213
VMware ESXi and Horizon DaaS	=6.5-650-201707214
VMware ESXi and Horizon DaaS	=6.5-650-201707215
VMware ESXi and Horizon DaaS	=6.5-650-201707216
VMware ESXi and Horizon DaaS	=6.5-650-201707217
VMware ESXi and Horizon DaaS	=6.5-650-201707218
VMware ESXi and Horizon DaaS	=6.5-650-201707219
VMware ESXi and Horizon DaaS	=6.5-650-201707220
VMware ESXi and Horizon DaaS	=6.5-650-201707221
VMware ESXi and Horizon DaaS	=6.5-650-201710001
VMware ESXi and Horizon DaaS	=6.5-650-201712001
VMware ESXi and Horizon DaaS	=6.5-650-201803001
VMware ESXi and Horizon DaaS	=6.5-650-201806001
VMware ESXi and Horizon DaaS	=6.5-650-201808001
VMware ESXi and Horizon DaaS	=6.5-650-201810001
VMware ESXi and Horizon DaaS	=6.5-650-201810002
VMware ESXi and Horizon DaaS	=6.5-650-201811001
VMware ESXi and Horizon DaaS	=6.5-650-201811002
VMware ESXi and Horizon DaaS	=6.5-650-201811301
VMware ESXi and Horizon DaaS	=6.5-650-201901001
VMware ESXi and Horizon DaaS	=6.5-650-201908001
VMware ESXi and Horizon DaaS	=6.5-650-201910001
VMware ESXi and Horizon DaaS	=6.5-650-20191004001
VMware ESXi and Horizon DaaS	=6.5-esxi650-201806401-bg
VMware ESXi and Horizon DaaS	=6.7
VMware ESXi and Horizon DaaS	=6.7-670-201806001
VMware ESXi and Horizon DaaS	=6.7-670-201807001
VMware ESXi and Horizon DaaS	=6.7-670-201808001
VMware ESXi and Horizon DaaS	=6.7-670-201810001
VMware ESXi and Horizon DaaS	=6.7-670-201810101
VMware ESXi and Horizon DaaS	=6.7-670-201810102
VMware ESXi and Horizon DaaS	=6.7-670-201810103
VMware ESXi and Horizon DaaS	=6.7-670-201810201
VMware ESXi and Horizon DaaS	=6.7-670-201810202
VMware ESXi and Horizon DaaS	=6.7-670-201810203
VMware ESXi and Horizon DaaS	=6.7-670-201810204
VMware ESXi and Horizon DaaS	=6.7-670-201810205
VMware ESXi and Horizon DaaS	=6.7-670-201810206
VMware ESXi and Horizon DaaS	=6.7-670-201810207
VMware ESXi and Horizon DaaS	=6.7-670-201810208
VMware ESXi and Horizon DaaS	=6.7-670-201810209
VMware ESXi and Horizon DaaS	=6.7-670-201810210
VMware ESXi and Horizon DaaS	=6.7-670-201810211
VMware ESXi and Horizon DaaS	=6.7-670-201810212
VMware ESXi and Horizon DaaS	=6.7-670-201810213
VMware ESXi and Horizon DaaS	=6.7-670-201810214
VMware ESXi and Horizon DaaS	=6.7-670-201810215
VMware ESXi and Horizon DaaS	=6.7-670-201810216
VMware ESXi and Horizon DaaS	=6.7-670-201810217
VMware ESXi and Horizon DaaS	=6.7-670-201810218
VMware ESXi and Horizon DaaS	=6.7-670-201810219
VMware ESXi and Horizon DaaS	=6.7-670-201810220
VMware ESXi and Horizon DaaS	=6.7-670-201810221
VMware ESXi and Horizon DaaS	=6.7-670-201810222
VMware ESXi and Horizon DaaS	=6.7-670-201810223
VMware ESXi and Horizon DaaS	=6.7-670-201810224
VMware ESXi and Horizon DaaS	=6.7-670-201810225
VMware ESXi and Horizon DaaS	=6.7-670-201810226
VMware ESXi and Horizon DaaS	=6.7-670-201810227
VMware ESXi and Horizon DaaS	=6.7-670-201810228
VMware ESXi and Horizon DaaS	=6.7-670-201810229
VMware ESXi and Horizon DaaS	=6.7-670-201810230
VMware ESXi and Horizon DaaS	=6.7-670-201810231
VMware ESXi and Horizon DaaS	=6.7-670-201810232
VMware ESXi and Horizon DaaS	=6.7-670-201810233
VMware ESXi and Horizon DaaS	=6.7-670-201810234
VMware ESXi and Horizon DaaS	=6.7-670-201811001
VMware ESXi and Horizon DaaS	=6.7-670-201901001
VMware ESXi and Horizon DaaS	=6.7-670-201901401
VMware ESXi and Horizon DaaS	=6.7-670-201901402
VMware ESXi and Horizon DaaS	=6.7-670-201901403
VMware ESXi and Horizon DaaS	=6.7-670-201903001
VMware ESXi and Horizon DaaS	=6.7-670-201904001
VMware ESXi and Horizon DaaS	=6.7-670-201904201
VMware ESXi and Horizon DaaS	=6.7-670-201904201-ug
VMware ESXi and Horizon DaaS	=6.7-670-201904202
VMware ESXi and Horizon DaaS	=6.7-670-201904202-ug
VMware ESXi and Horizon DaaS	=6.7-670-201904203
VMware ESXi and Horizon DaaS	=6.7-670-201904203-ug
VMware ESXi and Horizon DaaS	=6.7-670-201904204
VMware ESXi and Horizon DaaS	=6.7-670-201904204-ug
VMware ESXi and Horizon DaaS	=6.7-670-201904205
VMware ESXi and Horizon DaaS	=6.7-670-201904205-ug
VMware ESXi and Horizon DaaS	=6.7-670-201904206
VMware ESXi and Horizon DaaS	=6.7-670-201904206-ug
VMware ESXi and Horizon DaaS	=6.7-670-201904207
VMware ESXi and Horizon DaaS	=6.7-670-201904207-ug
VMware ESXi and Horizon DaaS	=6.7-670-201904208
VMware ESXi and Horizon DaaS	=6.7-670-201904208-ug
VMware ESXi and Horizon DaaS	=6.7-670-201904209
VMware ESXi and Horizon DaaS	=6.7-670-201904209-ug
VMware ESXi and Horizon DaaS	=6.7-670-201904210
VMware ESXi and Horizon DaaS	=6.7-670-201904210-ug
VMware ESXi and Horizon DaaS	=6.7-670-201904211
VMware ESXi and Horizon DaaS	=6.7-670-201904211-ug
VMware ESXi and Horizon DaaS	=6.7-670-201904212
VMware ESXi and Horizon DaaS	=6.7-670-201904212-ug
VMware ESXi and Horizon DaaS	=6.7-670-201904213
VMware ESXi and Horizon DaaS	=6.7-670-201904213-ug
VMware ESXi and Horizon DaaS	=6.7-670-201904214
VMware ESXi and Horizon DaaS	=6.7-670-201904214-ug
VMware ESXi and Horizon DaaS	=6.7-670-201904215
VMware ESXi and Horizon DaaS	=6.7-670-201904215-ug
VMware ESXi and Horizon DaaS	=6.7-670-201904216
VMware ESXi and Horizon DaaS	=6.7-670-201904216-ug
VMware ESXi and Horizon DaaS	=6.7-670-201904217
VMware ESXi and Horizon DaaS	=6.7-670-201904217-ug
VMware ESXi and Horizon DaaS	=6.7-670-201904218
VMware ESXi and Horizon DaaS	=6.7-670-201904218-ug
VMware ESXi and Horizon DaaS	=6.7-670-201904219
VMware ESXi and Horizon DaaS	=6.7-670-201904219-ug
VMware ESXi and Horizon DaaS	=6.7-670-201904220
VMware ESXi and Horizon DaaS	=6.7-670-201904220-ug
VMware ESXi and Horizon DaaS	=6.7-670-201904221
VMware ESXi and Horizon DaaS	=6.7-670-201904221-ug
VMware ESXi and Horizon DaaS	=6.7-670-201904222
VMware ESXi and Horizon DaaS	=6.7-670-201904222-ug
VMware ESXi and Horizon DaaS	=6.7-670-201904223
VMware ESXi and Horizon DaaS	=6.7-670-201904223-ug
VMware ESXi and Horizon DaaS	=6.7-670-201904224
VMware ESXi and Horizon DaaS	=6.7-670-201904224-ug
VMware ESXi and Horizon DaaS	=6.7-670-201904225
VMware ESXi and Horizon DaaS	=6.7-670-201904225-ug
VMware ESXi and Horizon DaaS	=6.7-670-201904226
VMware ESXi and Horizon DaaS	=6.7-670-201904226-ug
VMware ESXi and Horizon DaaS	=6.7-670-201904227
VMware ESXi and Horizon DaaS	=6.7-670-201904227-ug
VMware ESXi and Horizon DaaS	=6.7-670-201904228
VMware ESXi and Horizon DaaS	=6.7-670-201904228-ug
VMware ESXi and Horizon DaaS	=6.7-670-201904229
VMware ESXi and Horizon DaaS	=6.7-670-201904229-ug
VMware ESXi and Horizon DaaS	=6.7-670-201905001
VMware ESXi and Horizon DaaS	=6.7-670-201906002
VMware ESXi and Horizon DaaS	=6.7-670-201908101
VMware ESXi and Horizon DaaS	=6.7-670-201908102
VMware ESXi and Horizon DaaS	=6.7-670-201908103
VMware ESXi and Horizon DaaS	=6.7-670-201908104
VMware ESXi and Horizon DaaS	=6.7-670-201908201
VMware ESXi and Horizon DaaS	=6.7-670-201908202
VMware ESXi and Horizon DaaS	=6.7-670-201908203
VMware ESXi and Horizon DaaS	=6.7-670-201908204
VMware ESXi and Horizon DaaS	=6.7-670-201908205
VMware ESXi and Horizon DaaS	=6.7-670-201908206
VMware ESXi and Horizon DaaS	=6.7-670-201908207
VMware ESXi and Horizon DaaS	=6.7-670-201908208
VMware ESXi and Horizon DaaS	=6.7-670-201908209
VMware ESXi and Horizon DaaS	=6.7-670-201908210
VMware ESXi and Horizon DaaS	=6.7-670-201908211
VMware ESXi and Horizon DaaS	=6.7-670-201908212
VMware ESXi and Horizon DaaS	=6.7-670-201908213
VMware ESXi and Horizon DaaS	=6.7-670-201908214
VMware ESXi and Horizon DaaS	=6.7-670-201908215
VMware ESXi and Horizon DaaS	=6.7-670-201908216
VMware ESXi and Horizon DaaS	=6.7-670-201908217
VMware ESXi and Horizon DaaS	=6.7-670-201908218
VMware ESXi and Horizon DaaS	=6.7-670-201908219
VMware ESXi and Horizon DaaS	=6.7-670-201908220
VMware ESXi and Horizon DaaS	=6.7-670-201908221

Remedy

https://www.vmware.com/security/advisories/VMSA-2020-0008.html

Never miss a vulnerability like this again

Reference Links

https://www.vmware.com/security/advisories/VMSA-2020-0008.html

Frequently Asked Questions

What is the severity of CVE-2020-3955?
The severity of CVE-2020-3955 is classified as Important, with a maximum CVSSv3 base score.
How do I fix CVE-2020-3955?
To fix CVE-2020-3955, apply the relevant patches ESXi650-201912104-SG for ESXi 6.5 or ESXi670-202004103-SG for ESXi 6.7.
What versions of VMware ESXi are affected by CVE-2020-3955?
CVE-2020-3955 affects VMware ESXi versions 6.5 and 6.7, specifically those without the specified patches.
What kind of vulnerability is CVE-2020-3955?
CVE-2020-3955 is a cross-site scripting (XSS) vulnerability that allows for improper handling of script-related HTML.
Can CVE-2020-3955 be exploited remotely?
Yes, CVE-2020-3955 can potentially be exploited remotely against affected ESXi systems.

agent/type
collector/mitre-cve
source/MITRE
agent/remedy
agent/author
agent/references
agent/last-modified-date
agent/severity
agent/weakness
agent/description
agent/first-publish-date
agent/event
agent/source
agent/softwarecombine
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/vmware
canonical/vmware esxi
version/vmware esxi/6.5
version/vmware esxi/6.5-2
version/vmware esxi/6.5-650-201701001
version/vmware esxi/6.5-650-201703001
version/vmware esxi/6.5-650-201703002
version/vmware esxi/6.5-650-201704001
version/vmware esxi/6.5-650-201707101
version/vmware esxi/6.5-650-201707102
version/vmware esxi/6.5-650-201707103
version/vmware esxi/6.5-650-201707201
version/vmware esxi/6.5-650-201707202
version/vmware esxi/6.5-650-201707203
version/vmware esxi/6.5-650-201707204
version/vmware esxi/6.5-650-201707205
version/vmware esxi/6.5-650-201707206
version/vmware esxi/6.5-650-201707207
version/vmware esxi/6.5-650-201707208
version/vmware esxi/6.5-650-201707209
version/vmware esxi/6.5-650-201707210
version/vmware esxi/6.5-650-201707211
version/vmware esxi/6.5-650-201707212
version/vmware esxi/6.5-650-201707213
version/vmware esxi/6.5-650-201707214
version/vmware esxi/6.5-650-201707215
version/vmware esxi/6.5-650-201707216
version/vmware esxi/6.5-650-201707217
version/vmware esxi/6.5-650-201707218
version/vmware esxi/6.5-650-201707219
version/vmware esxi/6.5-650-201707220
version/vmware esxi/6.5-650-201707221
version/vmware esxi/6.5-650-201710001
version/vmware esxi/6.5-650-201712001
version/vmware esxi/6.5-650-201803001
version/vmware esxi/6.5-650-201806001
version/vmware esxi/6.5-650-201808001
version/vmware esxi/6.5-650-201810001
version/vmware esxi/6.5-650-201810002
version/vmware esxi/6.5-650-201811001
version/vmware esxi/6.5-650-201811002
version/vmware esxi/6.5-650-201811301
version/vmware esxi/6.5-650-201901001
version/vmware esxi/6.5-650-201908001
version/vmware esxi/6.5-650-201910001
version/vmware esxi/6.5-650-20191004001
version/vmware esxi/6.5-esxi650-201806401-bg
version/vmware esxi/6.7
version/vmware esxi/6.7-670-201806001
version/vmware esxi/6.7-670-201807001
version/vmware esxi/6.7-670-201808001
version/vmware esxi/6.7-670-201810001
version/vmware esxi/6.7-670-201810101
version/vmware esxi/6.7-670-201810102
version/vmware esxi/6.7-670-201810103
version/vmware esxi/6.7-670-201810201
version/vmware esxi/6.7-670-201810202
version/vmware esxi/6.7-670-201810203
version/vmware esxi/6.7-670-201810204
version/vmware esxi/6.7-670-201810205
version/vmware esxi/6.7-670-201810206
version/vmware esxi/6.7-670-201810207
version/vmware esxi/6.7-670-201810208
version/vmware esxi/6.7-670-201810209
version/vmware esxi/6.7-670-201810210
version/vmware esxi/6.7-670-201810211
version/vmware esxi/6.7-670-201810212
version/vmware esxi/6.7-670-201810213
version/vmware esxi/6.7-670-201810214
version/vmware esxi/6.7-670-201810215
version/vmware esxi/6.7-670-201810216
version/vmware esxi/6.7-670-201810217
version/vmware esxi/6.7-670-201810218
version/vmware esxi/6.7-670-201810219
version/vmware esxi/6.7-670-201810220
version/vmware esxi/6.7-670-201810221
version/vmware esxi/6.7-670-201810222
version/vmware esxi/6.7-670-201810223
version/vmware esxi/6.7-670-201810224
version/vmware esxi/6.7-670-201810225
version/vmware esxi/6.7-670-201810226
version/vmware esxi/6.7-670-201810227
version/vmware esxi/6.7-670-201810228
version/vmware esxi/6.7-670-201810229
version/vmware esxi/6.7-670-201810230
version/vmware esxi/6.7-670-201810231
version/vmware esxi/6.7-670-201810232
version/vmware esxi/6.7-670-201810233
version/vmware esxi/6.7-670-201810234
version/vmware esxi/6.7-670-201811001
version/vmware esxi/6.7-670-201901001
version/vmware esxi/6.7-670-201901401
version/vmware esxi/6.7-670-201901402
version/vmware esxi/6.7-670-201901403
version/vmware esxi/6.7-670-201903001
version/vmware esxi/6.7-670-201904001
version/vmware esxi/6.7-670-201904201
version/vmware esxi/6.7-670-201904201-ug
version/vmware esxi/6.7-670-201904202
version/vmware esxi/6.7-670-201904202-ug
version/vmware esxi/6.7-670-201904203
version/vmware esxi/6.7-670-201904203-ug
version/vmware esxi/6.7-670-201904204
version/vmware esxi/6.7-670-201904204-ug
version/vmware esxi/6.7-670-201904205
version/vmware esxi/6.7-670-201904205-ug
version/vmware esxi/6.7-670-201904206
version/vmware esxi/6.7-670-201904206-ug
version/vmware esxi/6.7-670-201904207
version/vmware esxi/6.7-670-201904207-ug
version/vmware esxi/6.7-670-201904208
version/vmware esxi/6.7-670-201904208-ug
version/vmware esxi/6.7-670-201904209
version/vmware esxi/6.7-670-201904209-ug
version/vmware esxi/6.7-670-201904210
version/vmware esxi/6.7-670-201904210-ug
version/vmware esxi/6.7-670-201904211
version/vmware esxi/6.7-670-201904211-ug
version/vmware esxi/6.7-670-201904212
version/vmware esxi/6.7-670-201904212-ug
version/vmware esxi/6.7-670-201904213
version/vmware esxi/6.7-670-201904213-ug
version/vmware esxi/6.7-670-201904214
version/vmware esxi/6.7-670-201904214-ug
version/vmware esxi/6.7-670-201904215
version/vmware esxi/6.7-670-201904215-ug
version/vmware esxi/6.7-670-201904216
version/vmware esxi/6.7-670-201904216-ug
version/vmware esxi/6.7-670-201904217
version/vmware esxi/6.7-670-201904217-ug
version/vmware esxi/6.7-670-201904218
version/vmware esxi/6.7-670-201904218-ug
version/vmware esxi/6.7-670-201904219
version/vmware esxi/6.7-670-201904219-ug
version/vmware esxi/6.7-670-201904220
version/vmware esxi/6.7-670-201904220-ug
version/vmware esxi/6.7-670-201904221
version/vmware esxi/6.7-670-201904221-ug
version/vmware esxi/6.7-670-201904222
version/vmware esxi/6.7-670-201904222-ug
version/vmware esxi/6.7-670-201904223
version/vmware esxi/6.7-670-201904223-ug
version/vmware esxi/6.7-670-201904224
version/vmware esxi/6.7-670-201904224-ug
version/vmware esxi/6.7-670-201904225
version/vmware esxi/6.7-670-201904225-ug
version/vmware esxi/6.7-670-201904226
version/vmware esxi/6.7-670-201904226-ug
version/vmware esxi/6.7-670-201904227
version/vmware esxi/6.7-670-201904227-ug
version/vmware esxi/6.7-670-201904228
version/vmware esxi/6.7-670-201904228-ug
version/vmware esxi/6.7-670-201904229
version/vmware esxi/6.7-670-201904229-ug
version/vmware esxi/6.7-670-201905001
version/vmware esxi/6.7-670-201906002
version/vmware esxi/6.7-670-201908101
version/vmware esxi/6.7-670-201908102
version/vmware esxi/6.7-670-201908103
version/vmware esxi/6.7-670-201908104
version/vmware esxi/6.7-670-201908201
version/vmware esxi/6.7-670-201908202
version/vmware esxi/6.7-670-201908203
version/vmware esxi/6.7-670-201908204
version/vmware esxi/6.7-670-201908205
version/vmware esxi/6.7-670-201908206
version/vmware esxi/6.7-670-201908207
version/vmware esxi/6.7-670-201908208
version/vmware esxi/6.7-670-201908209
version/vmware esxi/6.7-670-201908210
version/vmware esxi/6.7-670-201908211
version/vmware esxi/6.7-670-201908212
version/vmware esxi/6.7-670-201908213
version/vmware esxi/6.7-670-201908214
version/vmware esxi/6.7-670-201908215
version/vmware esxi/6.7-670-201908216
version/vmware esxi/6.7-670-201908217
version/vmware esxi/6.7-670-201908218
version/vmware esxi/6.7-670-201908219
version/vmware esxi/6.7-670-201908220
version/vmware esxi/6.7-670-201908221