CVE-2010-1143

CVE Database · CVE-2010-1143

CVE-2010-1143

· N/AModified

CVSS v3.1

N/A

EPSS

3.44%

Published

May 7, 2010

Modified

Apr 28, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBVMware View 3.1.x - URL Processing Cross-Site Scripting Exploit-DBVMware View Portal 3.1 - Cross-Site Scripting

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-site scripting (XSS) vulnerability in VMware View (formerly Virtual Desktop Manager or VDM) 3.1.x before 3.1.3 build 252693 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Weaknesses (CWE)

CWE-79

Affected Products (3)

vmware · view_managervulnerable

References (12)

http://lists.vmware.com/pipermail/security-announce/2010/000092.html

PatchVendor Advisory

http://security.gentoo.org/glsa/glsa-201209-25.xml

http://securitytracker.com/id?1023945

http://www.securityfocus.com/bid/39949

http://www.vmware.com/security/advisories/VMSA-2010-0008.html

PatchVendor Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16298

http://lists.vmware.com/pipermail/security-announce/2010/000092.html

PatchVendor Advisory

http://security.gentoo.org/glsa/glsa-201209-25.xml

KEV Catalog EPSS Scores Vendors All CVEs