cvedb.io
CVE-2017-4914
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2017-06-07T17:29:00.867 · Last modified 2026-06-17T01:19:33.167

Summary

VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x contains a deserialization issue. Exploitation of this issue may allow a remote attacker to execute commands on the appliance.

Affected products

vmware — vsphere_data_protection

Does this affect you?

Add your gear to cvedb and we'll alert you only when vmware ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.