VMware View Manager 3.1.3 is a maintenance release that resolves some known issues in the previous releases.

VMware View 3.1.3 addresses a cross-site scripting vulnerability in VMware View.  In order for an attacker to exploit the vulnerability, the attacker would need to lure the user to click on the attacker's URL.

Alexey Sintsov from Digital Security Research Group [DSecRG] reported this issue.  And the issue is identifed as DSECRG-09-058 by Digital Security Research Group.

The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2010-1143 to this issue.

VMware has rated this issue as important according the the VMware security response policy.

For more information and general installation help, see the release notes.