Read the docs
TI-2017-03072 Aliases CVE-2017-4940GHSA-29hc-rp6w-74v3

Cross-site scripting in VMware ESXi

Priority LOW 29CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Cross-site scripting
Confidentiality · integrity · availability
Low · Low · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-79.

Summary

The ESXi Host Client in VMware ESXi (6.5 before ESXi650-201712103-SG, 5.5 before ESXi600-201711103-SG and 5.5 before ESXi550-201709102-SG) contains a vulnerability that may allow for stored cross-site scripting (XSS). An attacker can exploit this vulnerability by injecting Javascript, which might get executed when other users access the Host Client.

Why it matters now

EPSS 0.0091 60th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
VMwareESXi6.5 before ESXi650-201712103-SG; 6.0 before ESXi600-201711103-SG; 5.5 before ESXi550-201709102-SG)—No fix listedCNA
  • ESXi VendorVMware Affected 6.5 before ESXi650-201712103-SG; 6.0 before ESXi600-201711103-SG; 5.5 before ESXi550-201709102-SG) Fixed in — No fix listed CNA

CPE configurations NVD · 120

CPEVersionsRoleVendor
cpe:2.3:o:vmware:esxi:5.5:-:*:*:*:*:*:*5.5VulnerableVMware
cpe:2.3:o:vmware:esxi:5.5:1:*:*:*:*:*:*5.5 1VulnerableVMware
cpe:2.3:o:vmware:esxi:5.5:2:*:*:*:*:*:*5.5 2VulnerableVMware
cpe:2.3:o:vmware:esxi:5.5:3a:*:*:*:*:*:*5.5 3aVulnerableVMware
cpe:2.3:o:vmware:esxi:5.5:3b:*:*:*:*:*:*5.5 3bVulnerableVMware
cpe:2.3:o:vmware:esxi:5.5:550-20170901001s:*:*:*:*:*:*5.5 550-20170901001sVulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:-:*:*:*:*:*:*6.0VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:1:*:*:*:*:*:*6.0 1VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:1a:*:*:*:*:*:*6.0 1aVulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:1b:*:*:*:*:*:*6.0 1bVulnerableVMware
  • cpe:2.3:o:vmware:esxi:5.5:-:*:*:*:*:*:* Versions 5.5 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:5.5:1:*:*:*:*:*:* Versions 5.5 1 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:5.5:2:*:*:*:*:*:* Versions 5.5 2 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:5.5:3a:*:*:*:*:*:* Versions 5.5 3a Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:5.5:3b:*:*:*:*:*:* Versions 5.5 3b Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:5.5:550-20170901001s:*:*:*:*:*:* Versions 5.5 550-20170901001s Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:-:*:*:*:*:*:* Versions 6.0 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:1:*:*:*:*:*:* Versions 6.0 1 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:1a:*:*:*:*:*:* Versions 6.0 1a Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:1b:*:*:*:*:*:* Versions 6.0 1b Vulnerable ·VMware
Show 110 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:vmware:esxi:6.0:2:*:*:*:*:*:*6.0 2VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:3:*:*:*:*:*:*6.0 3VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:3a:*:*:*:*:*:*6.0 3aVulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201504401:*:*:*:*:*:*6.0 600-201504401VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201505401:*:*:*:*:*:*6.0 600-201505401VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201507101:*:*:*:*:*:*6.0 600-201507101VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201507102:*:*:*:*:*:*6.0 600-201507102VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201507401:*:*:*:*:*:*6.0 600-201507401VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201507402:*:*:*:*:*:*6.0 600-201507402VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201507403:*:*:*:*:*:*6.0 600-201507403VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201507404:*:*:*:*:*:*6.0 600-201507404VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201507405:*:*:*:*:*:*6.0 600-201507405VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201507406:*:*:*:*:*:*6.0 600-201507406VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201507407:*:*:*:*:*:*6.0 600-201507407VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201509101:*:*:*:*:*:*6.0 600-201509101VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201509102:*:*:*:*:*:*6.0 600-201509102VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201509201:*:*:*:*:*:*6.0 600-201509201VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201509202:*:*:*:*:*:*6.0 600-201509202VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201509203:*:*:*:*:*:*6.0 600-201509203VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201509204:*:*:*:*:*:*6.0 600-201509204VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201509205:*:*:*:*:*:*6.0 600-201509205VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201509206:*:*:*:*:*:*6.0 600-201509206VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201509207:*:*:*:*:*:*6.0 600-201509207VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201509208:*:*:*:*:*:*6.0 600-201509208VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201509209:*:*:*:*:*:*6.0 600-201509209VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201509210:*:*:*:*:*:*6.0 600-201509210VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201510401:*:*:*:*:*:*6.0 600-201510401VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201511401:*:*:*:*:*:*6.0 600-201511401VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201601101:*:*:*:*:*:*6.0 600-201601101VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201601102:*:*:*:*:*:*6.0 600-201601102VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201601401:*:*:*:*:*:*6.0 600-201601401VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201601402:*:*:*:*:*:*6.0 600-201601402VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201601403:*:*:*:*:*:*6.0 600-201601403VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201601404:*:*:*:*:*:*6.0 600-201601404VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201601405:*:*:*:*:*:*6.0 600-201601405VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201602401:*:*:*:*:*:*6.0 600-201602401VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201603101:*:*:*:*:*:*6.0 600-201603101VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201603102:*:*:*:*:*:*6.0 600-201603102VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201603201:*:*:*:*:*:*6.0 600-201603201VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201603202:*:*:*:*:*:*6.0 600-201603202VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201603203:*:*:*:*:*:*6.0 600-201603203VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201603204:*:*:*:*:*:*6.0 600-201603204VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201603205:*:*:*:*:*:*6.0 600-201603205VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201603206:*:*:*:*:*:*6.0 600-201603206VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201603207:*:*:*:*:*:*6.0 600-201603207VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201603208:*:*:*:*:*:*6.0 600-201603208VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201605401:*:*:*:*:*:*6.0 600-201605401VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201608101:*:*:*:*:*:*6.0 600-201608101VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201608401:*:*:*:*:*:*6.0 600-201608401VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201608402:*:*:*:*:*:*6.0 600-201608402VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201608403:*:*:*:*:*:*6.0 600-201608403VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201608404:*:*:*:*:*:*6.0 600-201608404VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201608405:*:*:*:*:*:*6.0 600-201608405VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201610410:*:*:*:*:*:*6.0 600-201610410VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201611401:*:*:*:*:*:*6.0 600-201611401VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201611402:*:*:*:*:*:*6.0 600-201611402VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201611403:*:*:*:*:*:*6.0 600-201611403VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702101:*:*:*:*:*:*6.0 600-201702101VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702102:*:*:*:*:*:*6.0 600-201702102VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702201:*:*:*:*:*:*6.0 600-201702201VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702202:*:*:*:*:*:*6.0 600-201702202VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702203:*:*:*:*:*:*6.0 600-201702203VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702204:*:*:*:*:*:*6.0 600-201702204VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702205:*:*:*:*:*:*6.0 600-201702205VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702206:*:*:*:*:*:*6.0 600-201702206VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702207:*:*:*:*:*:*6.0 600-201702207VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702208:*:*:*:*:*:*6.0 600-201702208VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702209:*:*:*:*:*:*6.0 600-201702209VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702210:*:*:*:*:*:*6.0 600-201702210VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702211:*:*:*:*:*:*6.0 600-201702211VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702212:*:*:*:*:*:*6.0 600-201702212VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201703401:*:*:*:*:*:*6.0 600-201703401VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201706101:*:*:*:*:*:*6.0 600-201706101VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201706102:*:*:*:*:*:*6.0 600-201706102VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201706103:*:*:*:*:*:*6.0 600-201706103VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201706401:*:*:*:*:*:*6.0 600-201706401VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201706402:*:*:*:*:*:*6.0 600-201706402VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201706403:*:*:*:*:*:*6.0 600-201706403VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201710301:*:*:*:*:*:*6.0 600-201710301VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:-:*:*:*:*:*:*6.5VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201701001:*:*:*:*:*:*6.5 650-201701001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201703001:*:*:*:*:*:*6.5 650-201703001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201703002:*:*:*:*:*:*6.5 650-201703002VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201704001:*:*:*:*:*:*6.5 650-201704001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707101:*:*:*:*:*:*6.5 650-201707101VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707102:*:*:*:*:*:*6.5 650-201707102VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707103:*:*:*:*:*:*6.5 650-201707103VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707201:*:*:*:*:*:*6.5 650-201707201VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707202:*:*:*:*:*:*6.5 650-201707202VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707203:*:*:*:*:*:*6.5 650-201707203VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707204:*:*:*:*:*:*6.5 650-201707204VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707205:*:*:*:*:*:*6.5 650-201707205VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707206:*:*:*:*:*:*6.5 650-201707206VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707207:*:*:*:*:*:*6.5 650-201707207VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707208:*:*:*:*:*:*6.5 650-201707208VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707209:*:*:*:*:*:*6.5 650-201707209VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707210:*:*:*:*:*:*6.5 650-201707210VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707211:*:*:*:*:*:*6.5 650-201707211VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707212:*:*:*:*:*:*6.5 650-201707212VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707213:*:*:*:*:*:*6.5 650-201707213VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707214:*:*:*:*:*:*6.5 650-201707214VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707215:*:*:*:*:*:*6.5 650-201707215VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707216:*:*:*:*:*:*6.5 650-201707216VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707217:*:*:*:*:*:*6.5 650-201707217VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707218:*:*:*:*:*:*6.5 650-201707218VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707219:*:*:*:*:*:*6.5 650-201707219VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707220:*:*:*:*:*:*6.5 650-201707220VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707221:*:*:*:*:*:*6.5 650-201707221VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201710001:*:*:*:*:*:*6.5 650-201710001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201712001:*:*:*:*:*:*6.5 650-201712001VulnerableVMware
  • cpe:2.3:o:vmware:esxi:6.0:2:*:*:*:*:*:* Versions 6.0 2 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:3:*:*:*:*:*:* Versions 6.0 3 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:3a:*:*:*:*:*:* Versions 6.0 3a Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201504401:*:*:*:*:*:* Versions 6.0 600-201504401 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201505401:*:*:*:*:*:* Versions 6.0 600-201505401 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201507101:*:*:*:*:*:* Versions 6.0 600-201507101 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201507102:*:*:*:*:*:* Versions 6.0 600-201507102 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201507401:*:*:*:*:*:* Versions 6.0 600-201507401 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201507402:*:*:*:*:*:* Versions 6.0 600-201507402 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201507403:*:*:*:*:*:* Versions 6.0 600-201507403 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201507404:*:*:*:*:*:* Versions 6.0 600-201507404 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201507405:*:*:*:*:*:* Versions 6.0 600-201507405 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201507406:*:*:*:*:*:* Versions 6.0 600-201507406 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201507407:*:*:*:*:*:* Versions 6.0 600-201507407 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201509101:*:*:*:*:*:* Versions 6.0 600-201509101 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201509102:*:*:*:*:*:* Versions 6.0 600-201509102 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201509201:*:*:*:*:*:* Versions 6.0 600-201509201 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201509202:*:*:*:*:*:* Versions 6.0 600-201509202 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201509203:*:*:*:*:*:* Versions 6.0 600-201509203 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201509204:*:*:*:*:*:* Versions 6.0 600-201509204 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201509205:*:*:*:*:*:* Versions 6.0 600-201509205 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201509206:*:*:*:*:*:* Versions 6.0 600-201509206 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201509207:*:*:*:*:*:* Versions 6.0 600-201509207 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201509208:*:*:*:*:*:* Versions 6.0 600-201509208 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201509209:*:*:*:*:*:* Versions 6.0 600-201509209 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201509210:*:*:*:*:*:* Versions 6.0 600-201509210 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201510401:*:*:*:*:*:* Versions 6.0 600-201510401 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201511401:*:*:*:*:*:* Versions 6.0 600-201511401 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201601101:*:*:*:*:*:* Versions 6.0 600-201601101 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201601102:*:*:*:*:*:* Versions 6.0 600-201601102 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201601401:*:*:*:*:*:* Versions 6.0 600-201601401 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201601402:*:*:*:*:*:* Versions 6.0 600-201601402 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201601403:*:*:*:*:*:* Versions 6.0 600-201601403 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201601404:*:*:*:*:*:* Versions 6.0 600-201601404 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201601405:*:*:*:*:*:* Versions 6.0 600-201601405 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201602401:*:*:*:*:*:* Versions 6.0 600-201602401 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201603101:*:*:*:*:*:* Versions 6.0 600-201603101 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201603102:*:*:*:*:*:* Versions 6.0 600-201603102 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201603201:*:*:*:*:*:* Versions 6.0 600-201603201 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201603202:*:*:*:*:*:* Versions 6.0 600-201603202 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201603203:*:*:*:*:*:* Versions 6.0 600-201603203 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201603204:*:*:*:*:*:* Versions 6.0 600-201603204 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201603205:*:*:*:*:*:* Versions 6.0 600-201603205 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201603206:*:*:*:*:*:* Versions 6.0 600-201603206 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201603207:*:*:*:*:*:* Versions 6.0 600-201603207 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201603208:*:*:*:*:*:* Versions 6.0 600-201603208 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201605401:*:*:*:*:*:* Versions 6.0 600-201605401 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201608101:*:*:*:*:*:* Versions 6.0 600-201608101 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201608401:*:*:*:*:*:* Versions 6.0 600-201608401 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201608402:*:*:*:*:*:* Versions 6.0 600-201608402 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201608403:*:*:*:*:*:* Versions 6.0 600-201608403 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201608404:*:*:*:*:*:* Versions 6.0 600-201608404 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201608405:*:*:*:*:*:* Versions 6.0 600-201608405 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201610410:*:*:*:*:*:* Versions 6.0 600-201610410 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201611401:*:*:*:*:*:* Versions 6.0 600-201611401 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201611402:*:*:*:*:*:* Versions 6.0 600-201611402 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201611403:*:*:*:*:*:* Versions 6.0 600-201611403 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702101:*:*:*:*:*:* Versions 6.0 600-201702101 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702102:*:*:*:*:*:* Versions 6.0 600-201702102 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702201:*:*:*:*:*:* Versions 6.0 600-201702201 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702202:*:*:*:*:*:* Versions 6.0 600-201702202 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702203:*:*:*:*:*:* Versions 6.0 600-201702203 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702204:*:*:*:*:*:* Versions 6.0 600-201702204 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702205:*:*:*:*:*:* Versions 6.0 600-201702205 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702206:*:*:*:*:*:* Versions 6.0 600-201702206 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702207:*:*:*:*:*:* Versions 6.0 600-201702207 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702208:*:*:*:*:*:* Versions 6.0 600-201702208 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702209:*:*:*:*:*:* Versions 6.0 600-201702209 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702210:*:*:*:*:*:* Versions 6.0 600-201702210 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702211:*:*:*:*:*:* Versions 6.0 600-201702211 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702212:*:*:*:*:*:* Versions 6.0 600-201702212 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201703401:*:*:*:*:*:* Versions 6.0 600-201703401 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201706101:*:*:*:*:*:* Versions 6.0 600-201706101 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201706102:*:*:*:*:*:* Versions 6.0 600-201706102 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201706103:*:*:*:*:*:* Versions 6.0 600-201706103 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201706401:*:*:*:*:*:* Versions 6.0 600-201706401 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201706402:*:*:*:*:*:* Versions 6.0 600-201706402 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201706403:*:*:*:*:*:* Versions 6.0 600-201706403 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201710301:*:*:*:*:*:* Versions 6.0 600-201710301 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:-:*:*:*:*:*:* Versions 6.5 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201701001:*:*:*:*:*:* Versions 6.5 650-201701001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201703001:*:*:*:*:*:* Versions 6.5 650-201703001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201703002:*:*:*:*:*:* Versions 6.5 650-201703002 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201704001:*:*:*:*:*:* Versions 6.5 650-201704001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707101:*:*:*:*:*:* Versions 6.5 650-201707101 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707102:*:*:*:*:*:* Versions 6.5 650-201707102 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707103:*:*:*:*:*:* Versions 6.5 650-201707103 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707201:*:*:*:*:*:* Versions 6.5 650-201707201 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707202:*:*:*:*:*:* Versions 6.5 650-201707202 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707203:*:*:*:*:*:* Versions 6.5 650-201707203 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707204:*:*:*:*:*:* Versions 6.5 650-201707204 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707205:*:*:*:*:*:* Versions 6.5 650-201707205 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707206:*:*:*:*:*:* Versions 6.5 650-201707206 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707207:*:*:*:*:*:* Versions 6.5 650-201707207 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707208:*:*:*:*:*:* Versions 6.5 650-201707208 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707209:*:*:*:*:*:* Versions 6.5 650-201707209 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707210:*:*:*:*:*:* Versions 6.5 650-201707210 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707211:*:*:*:*:*:* Versions 6.5 650-201707211 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707212:*:*:*:*:*:* Versions 6.5 650-201707212 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707213:*:*:*:*:*:* Versions 6.5 650-201707213 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707214:*:*:*:*:*:* Versions 6.5 650-201707214 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707215:*:*:*:*:*:* Versions 6.5 650-201707215 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707216:*:*:*:*:*:* Versions 6.5 650-201707216 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707217:*:*:*:*:*:* Versions 6.5 650-201707217 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707218:*:*:*:*:*:* Versions 6.5 650-201707218 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707219:*:*:*:*:*:* Versions 6.5 650-201707219 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707220:*:*:*:*:*:* Versions 6.5 650-201707220 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707221:*:*:*:*:*:* Versions 6.5 650-201707221 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201710001:*:*:*:*:*:* Versions 6.5 650-201710001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201712001:*:*:*:*:*:* Versions 6.5 650-201712001 Vulnerable ·VMware

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-4940
  2. 2026-10-03 Alias added: GHSA-29hc-rp6w-74v3

References

Advisory 1

  • TI-2020-03488 Use after free in VMware ESXi KEVCVSS 3.1CRITICAL 9.8
  • TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-16135 Time-of-check time-of-use race condition in VMware ESXi KEVCVSS 3.1CRITICAL 9.3
  • TI-2025-16136 Out-of-bounds write in VMware ESXi KEVCVSS 3.1HIGH 8.2
  • TI-2010-03709 The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS)… KEVCVSS 3.1HIGH 7.8
  • TI-2024-24615 Authentication bypass in VMware ESXi KEVCVSS 3.1HIGH 7.2
See all 139 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences