CVE-2025-41228

MEDIUM

VMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) Vulnerability

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2025-41228 has a selected CVSS score of 4.3 (medium); EIP currently links 1 catalogued exploit.

Description

VMware ESXi and vCenter Server contain a reflected cross-site scripting vulnerability due to improper input validation. A malicious actor with network access to the login page of certain ESXi host or vCenter Server URL paths may exploit this issue to steal cookies or redirect to malicious websites.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated May 20, 2025 · Source: CVE List

Affected products and versions

5
ProductSourceVersion range

Cloud Foundation

Browse VMware / Cloud Foundation

Default status: unaffected

CVE List5.x, 4.5.xaffected

ESXi

Browse VMware / ESXi

Default status: unaffected

CVE List8.0 to < ESXi80U3se-24659227affected
7.0 to < ESXi70U3sv-24723868affected

Telco Cloud Infrastructure

Browse VMware / Telco Cloud Infrastructure

Default status: unaffected

CVE List3.x,2.xaffected

Telco Cloud Platform

Browse VMware / Telco Cloud Platform

Default status: unaffected

CVE List5.x, 4.x, 3.x, 2.xaffected

vCenter Server

Browse VMware / vCenter Server

Default status: unaffected

CVE List8.0 to < 8.0 U3eaffected

Proofs of concept

1

Catalogued exploits

ExploitDBVMware vSphere Client 8.0.3.0 - Reflected Cross-Site Scripting (XSS)ExploitDB exploitby Imraan Khan (Lich-Sec)Not analyzed1 file
ExploitDB
PoC details

References

2