ID de Prueba:	1.3.6.1.4.1.25623.1.0.140100
Categoría:	VMware Local Security Checks
Título:	VMware ESXi updates address a cross-site scripting issue (VMSA-2016-0023)
Resumen:	The ESXi Host Client contains a vulnerability that may allow for stored cross-site scripting (XSS).
Descripción:	Summary: The ESXi Host Client contains a vulnerability that may allow for stored cross-site scripting (XSS). Vulnerability Insight: The issue can be introduced by an attacker that has permission to manage virtual machines through ESXi Host Client or by tricking the vSphere administrator to import a specially crafted VM. The issue may be triggered on the system from where ESXi Host Client is used to manage the specially crafted VM. Solution: Apply the missing patch(es). CVSS Score: 3.5 CVSS Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-7463 BugTraq ID: 94998 http://www.securityfocus.com/bid/94998 http://www.securitytracker.com/id/1037501
Copyright	Copyright (C) 2016 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.