How many vmware vCenter CVEs are in CISA KEV?

None of vmware vCenter's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of vmware vCenter are affected?

8 distinct vmware vCenter versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in vmware vCenter CVEs?

vmware vCenter's CVEs most often map to these CWE weakness types: CWE-754 (Improper Check for Unusual or Exceptional Conditions), CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')).

What is the average severity of vmware vCenter CVEs?

The average CVSS base score across vmware vCenter's scored CVEs is 5.1.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

vmware

7 CVEs

vmware vCenter Vulnerabilities

Name: vmware vCenter vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for vCenter by vmware.

7

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

5.1

Avg CVSS

2009–2025

Last updated September 29, 2025

Overview

vmware vCenter has 7 published CVE records since 2009, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 5.1.

This page aggregates every publicly disclosed vulnerability (CVE) affecting vmware vCenter, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include windows.

Severity and exploitation

How the CVSS severity of vmware vCenter's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High2

Medium4

Low1

In CISA’s Known Exploited Vulnerabilities catalog

0

None of vmware vCenter's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No vmware vCenter CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every vmware vCenter version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

4.0 <= v <= 4.05 CVEs
4.1 <= v <= 4.13 CVEs
8.0 <= v < 8.0 U3g2 CVEs
7.0 <= v < 7.0 U3v1 CVE
7.0 <= v < 7.0 U3w1 CVE

Fixed in

8.0 U3g2 CVEs
7.0 U3v1 CVE
7.0 U3w1 CVE

Find a version

7 CVEs

Sort

Header injection vulnerability
CVE-2025-41250
Patch
CWE-77
High · CVSS 8.5
EPSS 0.6% (47th pct)2025-09-29
Denial-of-service vulnerability
CVE-2025-41241
Patch
CWE-754
Medium · CVSS 4.4
EPSS 0.3% (20th pct)2025-07-29
Medium vulnerability · 2011-05-09
CVE-2011-1789
Medium · CVSS 5.0
EPSS 1.9% (78th pct)2011-05-09
Low vulnerability · 2011-05-09
CVE-2011-1788
Low · CVSS 2.1
EPSS 0.4% (29th pct)2011-05-09
Medium vulnerability · 2011-05-09
CVE-2011-0426
Medium · CVSS 4.3
EPSS 2.1% (80th pct)2011-05-09
Medium vulnerability · 2009-12-16
CVE-2009-3731
Medium · CVSS 4.3
EPSS 2.8% (85th pct)2009-12-16
High vulnerability · 2009-03-12
CVE-2009-0778
Patch
High · CVSS 7.1
EPSS 4.6% (91th pct)2009-03-12

Common weakness types

The CWE weakness categories most often found in vmware vCenter CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many vmware vCenter CVEs were published each year.

2009

2

2011

3

2025

2

Other vmware products

Browse vulnerabilities for other products by vmware.

workstation229 CVEs cloud foundation153 CVEs esxi146 CVEs fusion137 CVEs player89 CVEs esx86 CVEs vcenter server81 CVEs spring framework74 CVEs

All vmware vulnerabilities

Frequently asked questions

Common questions about vmware vCenter vulnerabilities.

How many CVEs does vmware vCenter have?: vmware vCenter has 7 published CVE records since 2009.
How many vmware vCenter CVEs are in CISA KEV?: None of vmware vCenter's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for vmware vCenter vulnerabilities?: No vmware vCenter CVEs currently have a tracked public exploit in this dataset.
Which versions of vmware vCenter are affected?: 8 distinct vmware vCenter versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in vmware vCenter CVEs?: vmware vCenter's CVEs most often map to these CWE weakness types: CWE-754 (Improper Check for Unusual or Exceptional Conditions), CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')).
What is the average severity of vmware vCenter CVEs?: The average CVSS base score across vmware vCenter's scored CVEs is 5.1.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track vmware vCenter vulnerabilities

Monitor new vmware vCenter vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing