VMware vCenter Server
6 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-41228 | 8.0 – < 8.0 U3e | VMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) Vulnerability | MEDIUM 4.3 | 0.9 % | ||
| CVE-2025-41225 | 8.0 – < 8.0 U3e ; 7.0 – < 7.0 U3v | VMware vCenter Server authenticated command-execution vulnerability | HIGH 8.8 | 0.3 % | ||
| CVE-2019-5532 | 6.7 prior to 6.7 U3 ; 6.5 prior to 6.5 U3 ; 6.0 prior to 6.0 U3j | VMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j) contains an information disclosure vulnerability | HIGH 7.7 | 1.9 % | ||
| CVE-2019-5534 | 6.7 prior to 6.7 U3 ; 6.5 prior to 6.5 U3 ; 6.0 prior to 6.0 U3j | VMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j) contains an information disclosure vulnerability | HIGH 7.7 | 1.6 % | ||
| CVE-2017-4927 | 6.5 prior to 6.5 U1 ; 6.0 prior to 6.0 U3c | VMware vCenter Server (6.5 prior to 6.5 U1 and 6.0 prior to 6.0 U3c) does not correctly handle specially crafted LDAP network packets which | HIGH 7.5 | 2.3 % | ||
| CVE-2017-4926 | 6.5 prior to 6.5 U1 | VMware vCenter Server (6.5 prior to 6.5 U1) contains a vulnerability that may allow for stored cross-site scripting (XSS). An attacker with | MEDIUM 5.4 | 0.8 % |