Read the docs
TI-2017-03063 Aliases CVE-2017-4931GHSA-cfcx-vfw6-mfjv

Improper input validation in VMware AirWatch Console

Priority LOW 37CWE-20Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

VMware AirWatch Console 9.x prior to 9.2.0 contains a vulnerability that could allow an authenticated AWC user to add malicious data to an enrolled device's log files. Successful exploitation of this issue could result in an unsuspecting AWC user opening a CSV file which contains malicious content.

Why it matters now

EPSS 0.01259 69th percentileScored 2026-11-07
Fix Fixed VMware AirWatch Console (AWC) (VMware): 9.2.0

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
VMwareVMware AirWatch Console (AWC)9 to before 9.2.09.2.0Patch availableCNA
  • VMware AirWatch Console (AWC) VendorVMware Affected 9 to before 9.2.0 Fixed in 9.2.0 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:vmware:airwatch:*:*:*:*:*:*:*:*9.0.0 to before 9.2.0VulnerableVMware
  • cpe:2.3:a:vmware:airwatch:*:*:*:*:*:*:*:* Versions 9.0.0 to before 9.2.0 Vulnerable ·VMware

Remediation

  • Fix · CNA VMware AirWatch Console (AWC) (VMware) Fixed in 9.2.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-4931
  2. 2026-10-03 Alias added: GHSA-cfcx-vfw6-mfjv

References

Patch 1

  • TI-2017-03082 Cross-site request forgery in VMware AirWatch Console CVSS 3.0HIGH 8.8
  • TI-2017-03062 Cross-site scripting in VMware AirWatch Console CVSS 3.0MEDIUM 5.4
  • TI-2014-06884 AirWatch by VMware On-Premise 7.3.x before 7.3.3.0 (FP3) allows remote authenticated… CVSS 2.0MEDIUM 4.0

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences