CVE-2020-3953 - Cross Site Scripting (XSS) vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation

MEDIUM

Cross Site Scripting (XSS) vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation

Published Apr 15, 2020

4.8

MEDIUM

CVSS 3.1

EPSS 0.65%

Cross Site Scripting (XSS) vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

VMware vRealize Log Insight

n/a

Version	Status	Constraints
VMware vRealize Log Insight prior to 8.1.0	affected	-

No remediation recorded yet.

Weaknesses (2)

CWE-20

Improper Input Validation

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-25218		Advisory
https://www.vmware.com/security/advisories/VMSA-2020-0007.html		x_refsource_MISCVendor Advisory