CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.3. It affects VMware, VMWare, ESXi.
CVE
CVE-2020-3955
Severity
CRITICAL
CVSS
9.3
EPSS
1.31%
VMware VMWare ESXi
Original NVD Description
ESXi 6.5 without patch ESXi650-201912104-SG and ESXi 6.7 without patch ESXi670-202004103-SG do not properly neutralize script-related HTML when viewing virtual machines attributes. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 8.3.
Related CVEs
Other vulnerabilities affecting the same vendor(s)