Vulnerabilities fixed in VMware products

🗓️ 21 May 2025 13:08:22Reported by NCSCType

Broadcom fixed vCenter Server command execution, ESXi denial of service by guest users, and cross-site scripting; updates released.

Reporter	Title	Published	Views	Family All 46
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak System is vulnerable to an authenticated command-execution due to use of VMWare vCenter [CVE-2025-41225].	29 Jul 202512:00	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in VMware ESXi affect IBM Cloud Pak System	30 Jan 202616:53	–	ibm
BDU FSTEC	The vulnerability of the software for managing VMware vCenter Server’s virtual infrastructure lies in the lack of measures taken to neutralize special elements used in the operating system commands, allowing attackers to execute arbitrary commands.	21 May 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of VMware ESXi, Workstation, Fusion, and Cloud Foundation software-related to uncontrolled resource consumption allows attackers to trigger service failures.	25 Aug 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of VMware ESXi and Cloud Foundation software lies in their uncontrolled resource consumption, which allows attackers to trigger service failures.	25 Aug 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of VMware ESXi, VMware vCenter Server, and Cloud Foundation software stem from the lack of protective measures for the website structure, allowing attackers to execute cross-site scripting (XSS) attacks.	25 Aug 202500:00	–	bdu_fstec
Circl	CVE-2025-41225	20 May 202514:48	–	circl
Circl	CVE-2025-41226	20 May 202514:48	–	circl
Circl	CVE-2025-41227	20 May 202514:48	–	circl
Circl	CVE-2025-41228	20 May 202514:48	–	circl