Vulnerability Bulletins |
CVE-2025-41228 |
|
| Affected software | VMWARE |
| VMware ESXi and vCenter Server contain a reflected cross-site scripting vulnerability due to improper input validation. A malicious actor with network access to the login page of certain ESXi host or vCenter Server URL paths may exploit this issue to steal cookies or redirect to malicious websites. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2025-41228 | |