CVE-2012-5703: VMware Esx

Medium severity, CVSS 5.0. EPSS: 2.4% chance of exploitation in the next 30 days.

The vSphere API in VMware ESXi 4.1 and ESX 4.1 allows remote attackers to cause a denial of service (host daemon crash) via an invalid value in a (1) RetrieveProp or (2) RetrievePropEx SOAP request.

Affected products

• VMware Esx: version 4.1 only
• VMware ESXi: version 4.1 only

Published 2012-11-20. Last modified 2026-06-16.