CVE-2025-41225

Description

The vCenter Server contains an authenticated command-execution vulnerability. A malicious actor with privileges to create or modify alarms and run script action may exploit this issue to run arbitrary commands on the vCenter Server.

References

https://github.com/ascii42/check_vmware_cve

https://www.securityweek.com/nato-flagged-vulnerability-tops-latest-vmware-security-patch-batch/

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25717

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS