CVE-2025-41228

published 2025-05-20

CVE-2025-41228: VMware ESXi and vCenter Server contain a reflected cross-site scripting vulnerability due to improper input validation. A malicious actor with network access…

Priority P4 29 medium 4.3 CVSS 3.1

AV N AC L PR N UI R S U C L I N A N

EXPLOIT

VMware ESXi and vCenter Server contain a reflected cross-site scripting vulnerability due to improper input validation. A malicious actor with network access to the login page of certain ESXi host or vCenter Server URL paths may exploit this issue to steal cookies or redirect to malicious websites.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
vmware	cloud_foundation	—	—
vmware	esxi	>= 7.0 < ESXi70U3sv-24723868	ESXi70U3sv-24723868
vmware	esxi	>= 8.0 < ESXi80U3se-24659227	ESXi80U3se-24659227
vmware	telco_cloud_infrastructure	—	—
vmware	telco_cloud_platform	—	—
vmware	vcenter_server	>= 8.0 < 8.0 U3e	8.0 U3e

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-79