UpHeron
All vulnerabilities

Servers and applications

CVE-2017-4940

The ESXi Host Client in VMware ESXi (6.5 before ESXi650-201712103-SG, 5.5 before ESXi600-201711103-SG and 5.5 before ESXi550-201709102-SG) contains a vulnerability that may allow for stored cross-site scripting (XSS). An attacker can exploit this vulnerability by injecting Javascript, which might get executed when other users access the Host Client.

Severity
Medium 6.1
Published
20 Dec 2017
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
0.9% in the next 30 daysHigher than 60% of CVEs. EPSS by FIRST, 11 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
VMware ESXiServers and applications · cpe:o:vmware:esxi
  • Version 6.5-650-201712001
  • Version 6.5-650-201710001
  • Version 6.5-650-201707221
  • Version 6.5-650-201707220
All 120 release lines
  • Version 5.5-3a
  • Version 5.5-3b
  • Version 5.5
  • Version 5.5-1
  • Version 5.5-2
  • Version 5.5-550-20170901001s
  • Version 6.0-1a
  • Version 6.0-1b
  • Version 6.0-3a
  • Version 6.0
  • Version 6.0-1
  • Version 6.0-2
  • Version 6.0-3
  • Version 6.0-600-201504401
  • Version 6.0-600-201505401
  • Version 6.0-600-201507101
  • Version 6.0-600-201507102
  • Version 6.0-600-201507401
  • Version 6.0-600-201507402
  • Version 6.0-600-201507403
  • Version 6.0-600-201507404
  • Version 6.0-600-201507405
  • Version 6.0-600-201507406
  • Version 6.0-600-201507407
  • Version 6.0-600-201509101
  • Version 6.0-600-201509102
  • Version 6.0-600-201509201
  • Version 6.0-600-201509202
  • Version 6.0-600-201509203
  • Version 6.0-600-201509204
  • Version 6.0-600-201509205
  • Version 6.0-600-201509206
  • Version 6.0-600-201509207
  • Version 6.0-600-201509208
  • Version 6.0-600-201509209
  • Version 6.0-600-201509210
  • Version 6.0-600-201510401
  • Version 6.0-600-201511401
  • Version 6.0-600-201601101
  • Version 6.0-600-201601102
  • Version 6.0-600-201601401
  • Version 6.0-600-201601402
  • Version 6.0-600-201601403
  • Version 6.0-600-201601404
  • Version 6.0-600-201601405
  • Version 6.0-600-201602401
  • Version 6.0-600-201603101
  • Version 6.0-600-201603102
  • Version 6.0-600-201603201
  • Version 6.0-600-201603202
  • Version 6.0-600-201603203
  • Version 6.0-600-201603204
  • Version 6.0-600-201603205
  • Version 6.0-600-201603206
  • Version 6.0-600-201603207
  • Version 6.0-600-201603208
  • Version 6.0-600-201605401
  • Version 6.0-600-201608101
  • Version 6.0-600-201608401
  • Version 6.0-600-201608402
  • Version 6.0-600-201608403
  • Version 6.0-600-201608404
  • Version 6.0-600-201608405
  • Version 6.0-600-201610410
  • Version 6.0-600-201611401
  • Version 6.0-600-201611402
  • Version 6.0-600-201611403
  • Version 6.0-600-201702101
  • Version 6.0-600-201702102
  • Version 6.0-600-201702201
  • Version 6.0-600-201702202
  • Version 6.0-600-201702203
  • Version 6.0-600-201702204
  • Version 6.0-600-201702205
  • Version 6.0-600-201702206
  • Version 6.0-600-201702207
  • Version 6.0-600-201702208
  • Version 6.0-600-201702209
  • Version 6.0-600-201702210
  • Version 6.0-600-201702211
  • Version 6.0-600-201702212
  • Version 6.0-600-201703401
  • Version 6.0-600-201706101
  • Version 6.0-600-201706102
  • Version 6.0-600-201706103
  • Version 6.0-600-201706401
  • Version 6.0-600-201706402
  • Version 6.0-600-201706403
  • Version 6.0-600-201710301
  • Version 6.5
  • Version 6.5-650-201701001
  • Version 6.5-650-201703001
  • Version 6.5-650-201703002
  • Version 6.5-650-201704001
  • Version 6.5-650-201707101
  • Version 6.5-650-201707102
  • Version 6.5-650-201707103
  • Version 6.5-650-201707201
  • Version 6.5-650-201707202
  • Version 6.5-650-201707203
  • Version 6.5-650-201707204
  • Version 6.5-650-201707205
  • Version 6.5-650-201707206
  • Version 6.5-650-201707207
  • Version 6.5-650-201707208
  • Version 6.5-650-201707209
  • Version 6.5-650-201707210
  • Version 6.5-650-201707211
  • Version 6.5-650-201707212
  • Version 6.5-650-201707213
  • Version 6.5-650-201707214
  • Version 6.5-650-201707215
  • Version 6.5-650-201707216
  • Version 6.5-650-201707217
  • Version 6.5-650-201707218
  • Version 6.5-650-201707219
  • Version 6.5-650-201707220
  • Version 6.5-650-201707221
  • Version 6.5-650-201710001
  • Version 6.5-650-201712001

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2017-4940
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2017-4940