漏洞类别：VMware
漏洞等级： 
漏洞信息
VMware ESXi is an enterprise level computer virtualization product.
The target is missing update ESXi600-20161100, which resolves the following security issues:
Bulletin ID ESXi600-201611101-SG
Bulletin ID ESXi600-201611102-SG
Refer to VMware advisory KB2146984 or VMSA-2016-0023 for further details.
漏洞危害
An attacker could conduct cross-site scripting attacks. Successful exploits could result in the execution of arbitrary attacker-supplied HTML and script code in the context of the affected application. Other attacks are also possible.
解决方案
To resolve this issue, upgrade to VMware ESXi Build 4558694 or the latest VMware ESXi build.
Refer to VMware advisory KB2146984 for updates and build information.
Patch:
Following are links for downloading patches to fix the vulnerabilities:
0day
文章评论