CVE-2005-4583

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-12-29 · updated 2026-06-16
Weakness: CWE-79

Description

Unspecified vulnerability in the Management Interface in VMware ESX Server 2.x up to 2.5.x before 24 December 2005 allows "remote code execution in the Web browser" via unspecified attack vectors, probably related to cross-site scripting (XSS).

Affected products

VMware ESX: 2.0, 2.0.1, 2.1.1, 2.1.2, 2.5, 2.5.2

References

http://secunia.com/advisories/18250
http://securitytracker.com/id?1015422
http://www.osvdb.org/22119
http://www.securityfocus.com/bid/16086
http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=2001
http://www.vupen.com/english/advisories/2005/3084
http://secunia.com/advisories/18250
http://securitytracker.com/id?1015422
http://www.osvdb.org/22119
http://www.securityfocus.com/bid/16086
http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=2001
http://www.vupen.com/english/advisories/2005/3084

Get alerted when CVE-2005-4583 or the next vulnerability affects your stack