Test ID:	1.3.6.1.4.1.25623.1.0.809794
Category:	VMware Local Security Checks
Title:	VMware vRealize Automation Cross-Site Scripting Vulnerability (VMSA-2016-0003)
Summary:	VMware vRealize Automation is prone to a cross-site scripting (XSS) vulnerability.
Description:	Summary: VMware vRealize Automation is prone to a cross-site scripting (XSS) vulnerability. Vulnerability Insight: The flaw exists as software does not properly filter HTML code from user-supplied input before displaying the input. Vulnerability Impact: Successful exploitation will result in the execution of arbitrary attacker-supplied HTML and script code in the context of the affected application, potentially allowing the attacker to steal cookie-based authentication credentials or control how the page is rendered to the user. Affected Software/OS: VMware vRealize Automation versions 6.x prior to 6.2.4 on Linux. Solution: Upgrade to VMware vRealize Automation version 6.2.4 Build 3624994 or later. CVSS Score: 3.5 CVSS Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-2344 http://www.securitytracker.com/id/1035270
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.