VDB

GCVE-110-NCSC-2025-171

GCVE-110-NCSC-2025-171
Advisory PublishedCVSS 8.8/10
Vulnetix · Advisory published May 21, 2025
Broadcom heeft kwetsbaarheden verholpen in VMware ESXi (inclusief Workstation en Fusion) en vCenter Server.

Weaknesses (CWE)

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')CWE-400Uncontrolled Resource ConsumptionCWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Risk Scores

CVSS 3.1
8.8/10
High · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersionsPlatforms
VMwarevers:unknown/<esxi70u3sv-24723868
VMwarevers:broadcom/4.5.x
VMwarevers:broadcom/2.x
VMwarevers:broadcom/3.x
VMwarevers:broadcom/8.0
VMwarevers:broadcom/5.x
VMwarevers:broadcom/13.x
VMwarevers:broadcom/17.x
VMwarevers:broadcom/7.0

References

advisory
advisory
advisory
advisory
advisory
advisory

Browse GCVE Records

74,132 records in the GCVE database · Updated July 20, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›