{"api_version":"1","generated_at":"2026-07-23T07:31:16+00:00","cve":"CVE-2005-4583","urls":{"html":"https://cve.report/CVE-2005-4583","api":"https://cve.report/api/cve/CVE-2005-4583.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2005-4583","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2005-4583"},"summary":{"title":"CVE-2005-4583","description":"Unspecified vulnerability in the Management Interface in VMware ESX Server 2.x up to 2.5.x before 24 December 2005 allows \"remote code execution in the Web browser\" via unspecified attack vectors, probably related to cross-site scripting (XSS).","state":"PUBLISHED","assigner":"mitre","published_at":"2005-12-29 11:03:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.securityfocus.com/bid/16086","name":"http://www.securityfocus.com/bid/16086","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"VMWare ESX Server Management Interface HTML Injection Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.osvdb.org/22119","name":"http://www.osvdb.org/22119","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.vupen.com/english/advisories/2005/3084","name":"http://www.vupen.com/english/advisories/2005/3084","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1015422","name":"http://securitytracker.com/id?1015422","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"],"title":"SecurityTracker.com Archives - VMware ESX Server Management Interface Bug Lets Remote Users Execute Code in the Browser","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/18250","name":"http://secunia.com/advisories/18250","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Secunia - Advisories - VMware ESX Server Management Interface Unspecified Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=2001","name":"http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=2001","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"VMware Knowledge Base - Answer","mime":"text/html","httpstatus":"401","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-4583","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-4583","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2005","cve_id":"4583","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"vmware","cpe5":"esx","cpe6":"2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"4583","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"vmware","cpe5":"esx","cpe6":"2.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"4583","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"vmware","cpe5":"esx","cpe6":"2.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"4583","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"vmware","cpe5":"esx","cpe6":"2.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"4583","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"vmware","cpe5":"esx","cpe6":"2.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"4583","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"vmware","cpe5":"esx","cpe6":"2.5.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T23:53:27.226Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=2001"},{"name":"16086","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/16086"},{"name":"1015422","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1015422"},{"name":"18250","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/18250"},{"name":"ADV-2005-3084","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2005/3084"},{"name":"22119","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/22119"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2005-12-24T00:00:00.000Z","descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Management Interface in VMware ESX Server 2.x up to 2.5.x before 24 December 2005 allows \"remote code execution in the Web browser\" via unspecified attack vectors, probably related to cross-site scripting (XSS)."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2006-01-02T10:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=2001"},{"name":"16086","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/16086"},{"name":"1015422","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1015422"},{"name":"18250","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/18250"},{"name":"ADV-2005-3084","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2005/3084"},{"name":"22119","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/22119"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2005-4583","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Unspecified vulnerability in the Management Interface in VMware ESX Server 2.x up to 2.5.x before 24 December 2005 allows \"remote code execution in the Web browser\" via unspecified attack vectors, probably related to cross-site scripting (XSS)."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=2001","refsource":"CONFIRM","url":"http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=2001"},{"name":"16086","refsource":"BID","url":"http://www.securityfocus.com/bid/16086"},{"name":"1015422","refsource":"SECTRACK","url":"http://securitytracker.com/id?1015422"},{"name":"18250","refsource":"SECUNIA","url":"http://secunia.com/advisories/18250"},{"name":"ADV-2005-3084","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2005/3084"},{"name":"22119","refsource":"OSVDB","url":"http://www.osvdb.org/22119"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2005-4583","datePublished":"2005-12-29T11:00:00.000Z","dateReserved":"2005-12-29T00:00:00.000Z","dateUpdated":"2024-08-07T23:53:27.226Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2005-12-29 11:03:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A348CABB-CD52-4C55-9653-154C75605CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BA74505A-3550-4646-B2D6-6E6D0924023D"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"EC77D81A-12AA-4948-9970-9461289DC648"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"54A10ABE-E778-4133-B1AA-05FE6829A34A"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:2.5:*:*:*:*:*:*:*","matchCriteriaId":"C2CB97F9-9DF6-4493-A245-F4901F4DD22E"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C862131A-64D8-4C2D-815F-19971D63AF00"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2005","CveId":"4583","Ordinal":"1","Title":"CVE-2005-4583","CVE":"CVE-2005-4583","Year":"2005"},"notes":[{"CveYear":"2005","CveId":"4583","Ordinal":"1","NoteData":"Unspecified vulnerability in the Management Interface in VMware ESX Server 2.x up to 2.5.x before 24 December 2005 allows \"remote code execution in the Web browser\" via unspecified attack vectors, probably related to cross-site scripting (XSS).","Type":"Description","Title":"CVE-2005-4583"},{"CveYear":"2005","CveId":"4583","Ordinal":"2","NoteData":"2005-12-29","Type":"Other","Title":"Published"},{"CveYear":"2005","CveId":"4583","Ordinal":"3","NoteData":"2006-01-02","Type":"Other","Title":"Modified"}]}}}