CVE-2017-4930

VMware AirWatch Console 9.x prior to 9.2.0 contains a vulnerability that could allow an authenticated AWC user to add a malicious URL to an enrolled device’s ‘Links’ page. Successful exploitation of this issue could result in an unsuspecting AWC user being redirected to a malicious URL.

Date published : 2017-11-16

http://www.securityfocus.com/bid/101772

https://www.vmware.com/us/security/advisories/VMSA-2017-0016.html