4.3
Moyenne
CVE-2025-41228 VMware ESXi and vCenter Server contain a reflected cross-site scripting vulnerability due to improper input…
Description
VMware ESXi and vCenter Server contain a reflected cross-site scripting vulnerability due to improper input validation. A malicious actor with network access to the login page of certain ESXi host or vCenter Server URL paths may exploit this issue to steal cookies or redirect to malicious websites.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| vCenter Server 8.0 | 8.0 → dernières | Pas de correctif indiqué |
| Cloud Foundation | Versions non publiées | |
| Telco Cloud Platform | Versions non publiées | |
| Telco Cloud Infrastructure | Versions non publiées | |
| ESXi 8.0 | 8.0 → dernières | Pas de correctif indiqué |
| ESXi 7.0 | 7.0 → dernières | Pas de correctif indiqué |
Références
- support.broadcom.com support.broadcom.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de vCenter Server
Les 6 CVE de vCenter Server →
CVE-2025-41225
The vCenter Server contains an authenticated command-execution vulnerability. A malicious actor with privileges to…
8.8
Élevée
CVE-2019-5532
VMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j) contains an information…
Non notée
CVE-2019-5534
VMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j) contains an information…
Non notée
CVE-2017-4927
VMware vCenter Server (6.5 prior to 6.5 U1 and 6.0 prior to 6.0 U3c) does not correctly handle specially crafted LDAP…
Non notée