Beveiligingsadvies

CVE-2025-41228

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-05-20 14:24:34
Laatst bijgewerkt 2025-06-24 07:14:21
Toegewezen door vmware
CVSS-score 4.3
Status PUBLISHED

Beschrijving

VMware ESXi and vCenter Server contain a reflected cross-site scripting vulnerability due to improper input validation. A malicious actor with network access to the login page of certain ESXi host or vCenter Server URL paths may exploit this issue to steal cookies or redirect to malicious websites.