CVE-2017-4926

CVE-2017-4926: vulnerability in VMware vCenter Server

Published · Updated

Follow this CVE+ Monitor vCenter Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.8%
VMware vCenter Server (6.5 prior to 6.5 U1) contains a vulnerability that may allow for stored cross-site scripting (XSS). An attacker with VC user privileges can inject malicious java-scripts which will get executed when other VC users access the page.
Affected products
VMware · vCenter Server
Related CVEs — VMware vCenter Server

In the same product, most dangerous first.

CVE-2017-4927—CVE-2017-4927EPSS 2.3%CVE-2019-5532—CVE-2019-5532EPSS 1.9%CVE-2019-5534—CVE-2019-5534EPSS 1.6%CVE-2025-41228MEDIUMVMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) VulnerabilityEPSS 0.9%CVE-2025-41225HIGHVMware vCenter Server authenticated command-execution vulnerabilityEPSS 0.3%