CVE-2016-2075

https://notcve.org/view.php?id=CVE-2016-2075

Cross-site scripting (XSS) vulnerability in VMware vRealize Business Advanced and Enterprise 8.x before 8.2.5 on Linux allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de XSS en VMware vRealize Business Advanced and Enterprise 8.x en versiones anteriores a 8.2.5 en Linux permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados. • http://www.securitytracker.com/id/1035270 http://www.vmware.com/security/advisories/VMSA-2016-0003.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •