CVE-2025-41250

VMware vCenter contains an SMTP header injection vulnerability. A malicious actor with non-administrative privileges on vCenter who has permission to create scheduled tasks may be able to manipulate the notification emails sent for scheduled tasks.

CVSS v3 8.5 HIGH

8.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.1 / Impact : 4.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact LOW

Scope CHANGED

References

Link	Resource
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36150

Configurations

No configuration.

History

18 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) VMware vCenter contiene una vulnerabilidad de inyección de encabezado SMTP. Un actor malicioso con privilegios no administrativos en vCenter que tiene permiso para crear tareas programadas podría manipular los correos electrónicos de notificación enviados para tareas programadas.

Information

Published : 2025-09-29 18:15

Updated : 2026-10-18 21:10

NVD link : CVE-2025-41250

Mitre link : CVE-2025-41250

CVE.ORG link : CVE-2025-41250

JSON object : View

Products Affected

No product.

CWE

CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

{"id": "CVE-2025-41250", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-41250", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-09-30T03:55:12.907714Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security@vmware.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 4.7, "exploitabilityScore": 3.1}]}, "affected": [{"source": "security@vmware.com", "affectedData": [{"vendor": "VMware", "product": "vCenter", "versions": [{"status": "affected", "version": "8.0", "lessThan": "8.0 U3g", "versionType": "custom"}, {"status": "affected", "version": "7.0", "lessThan": "7.0 U3w", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "VMware", "product": "Cloud Foundation", "versions": [{"status": "affected", "version": "9.x.x.x", "lessThan": "9.0.1.0", "versionType": "custom"}, {"status": "affected", "version": "5.x", "lessThan": "5.2.2", "versionType": "custom"}, {"status": "affected", "version": "4.5.x"}], "defaultStatus": "unaffected"}, {"vendor": "VMware", "product": "Telco Cloud Platform", "versions": [{"status": "affected", "version": "5.x, 4.x, 3.x, 2.x"}], "defaultStatus": "unaffected"}, {"vendor": "VMware", "product": "Telco Cloud Infrastructure", "versions": [{"status": "affected", "version": "3.x, 2.x"}], "defaultStatus": "unaffected"}, {"vendor": "VMware", "product": "vSphere Foundation", "versions": [{"status": "affected", "version": "9.x.x.x", "lessThan": "9.0.1.0", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2025-09-29T18:15:31.460", "references": [{"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36150", "source": "security@vmware.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security@vmware.com", "description": [{"lang": "en", "value": "CWE-77"}]}], "descriptions": [{"lang": "en", "value": "VMware vCenter contains an SMTP header injection vulnerability.\u00a0A malicious actor with non-administrative privileges on vCenter who has permission to create scheduled tasks may be able to manipulate the notification emails sent for scheduled tasks."}, {"lang": "es", "value": "VMware vCenter contiene una vulnerabilidad de inyecci\u00f3n de encabezado SMTP. Un actor malicioso con privilegios no administrativos en vCenter que tiene permiso para crear tareas programadas podr\u00eda manipular los correos electr\u00f3nicos de notificaci\u00f3n enviados para tareas programadas."}], "lastModified": "2026-10-18T21:10:00.120", "sourceIdentifier": "security@vmware.com"}