8.8
Élevée
CVE-2025-41225 The vCenter Server contains an authenticated command-execution vulnerability. A malicious actor with privileges to…
Description
The vCenter Server contains an authenticated command-execution vulnerability. A malicious actor with privileges to create or modify alarms and run script action may exploit this issue to run arbitrary commands on the vCenter Server.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| vCenter Server 8.0 | 8.0 → dernières | Pas de correctif indiqué |
| vCenter Server 7.0 | 7.0 → dernières | Pas de correctif indiqué |
| Cloud Foundation | Versions non publiées | |
| Telco Cloud Platform | Versions non publiées | |
| Telco Cloud Infrastructure | Versions non publiées |
Références
- support.broadcom.com support.broadcom.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de vCenter Server
Les 6 CVE de vCenter Server →
CVE-2025-41228
VMware ESXi and vCenter Server contain a reflected cross-site scripting vulnerability due to improper input…
4.3
Moyenne
CVE-2019-5532
VMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j) contains an information…
Non notée
CVE-2019-5534
VMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j) contains an information…
Non notée
CVE-2017-4927
VMware vCenter Server (6.5 prior to 6.5 U1 and 6.0 prior to 6.0 U3c) does not correctly handle specially crafted LDAP…
Non notée