CVE-2017-4926

CVE-2017-4926 is a stored cross-site scripting (XSS) vulnerability affecting VMware vCenter Server versions prior to 6.5 U1. An authenticated attacker with vCenter user privileges can inject malicious JavaScript, which executes when other vCenter users access the compromised page. This vulnerability has a CVSS score of 5.4 (Medium), indicating a network-based attack with low privileges and user interaction, potentially leading to limited confidentiality and integrity impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog. Community discussion and media coverage are minimal, with only one mention and one article, respectively.