CVE-2010-1143

Cross-site scripting (XSS) vulnerability in VMware View (formerly Virtual Desktop Manager or VDM)...

4.3 MediumPublic exploit

Cross-site scripting (XSS) vulnerability in VMware View (formerly Virtual Desktop Manager or VDM) 3.1.x before 3.1.3 build 252693 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Exploit likelihood

3.44%Up 0.5 points since Feb 4, 2022

What each source reports

NVD Score used 4.3

Record: CVE-2010-1143
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness: CWE-79
Updated: 2026-11-02

CVE List No score

Record: CVE-2010-1143
Updated: 2026-11-02

EUVDEUVD-2010-1174 No score

Record: EUVD-2010-1174
Updated: 2026-11-03

GitHub AdvisoriesGHSA-3475-j2vx-vqhg No score

Cross-site scripting (XSS) vulnerability in VMware View (formerly Virtual Desktop Manager or VDM)...

Record: GHSA-3475-j2vx-vqhg
Weakness: CWE-79
Updated: 2026-11-02

Affected products

vmware view manager

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	VMware View Portal 3.1 - Cross-Site Scripting	2010-05-14
Exploit-DB	VMware View 3.1.x - URL Processing Cross-Site Scripting	2010-05-05

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-1143 is a medium vulnerability (CVSS 4.3) in Vmware View Manager, published May 7, 2010. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.44%, the 89th percentile. No source names a fixed version.