CVE-2017-4947 - CVE House

Back to Database

Status published Critical CVE-2017-4947

VMware vRealize Automation (7.3 and 7.2) and vSphere Integrated Containers...

9.8 CVSS

Vulnerability Description

VMware vRealize Automation (7.3 and 7.2) and vSphere Integrated Containers (1.x before 1.3) contain a deserialization vulnerability via Xenon. Successful exploitation of this issue may allow remote attackers to execute arbitrary code on the appliance.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-4947

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from VMware

View All →

Spring Framework STOMP CSRF Vulnerability

Spring Cloud Gateway Webflux SpEL Injection Vulnerability Allowing Exposure of Environment Variables

Username enumeration vulnerability

Header injection vulnerability

CVE-2025-41249: Spring Framework Annotation Detection Vulnerability

Affected Vendor

VMware

View all reports →

Affected Software

vRealize Automation, vSphere Integrated Containers

Vulnerable Versions:

7.3 and 7.2, 1.x before 1.3

Timeline

Official Publish: January 29th, 2018

Last Modified: September 17th, 2024

Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.