CVE-2025-41225 — VMware vCenter Server authenticated command-execution vulnerability
The vCenter Server contains an authenticated command-execution vulnerability. A malicious actor with privileges to create or modify alarms and run script action may exploit this…
Published: 2025-05-20 · CVSS: 8.8 · CVSS 3.1
The vCenter Server contains an authenticated command-execution vulnerability. A malicious actor with privileges to create or modify alarms and run script action may exploit this issue to run arbitrary commands on the vCenter Server.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7