VDB
CVE-2025-41242
CVE-2025-41242
PUBLISHED
CVSS 8.699999809265137 HIGH
Das Spring Framework bietet ein Entwicklungsmodell für Java mit Infrastrukturunterstützung auf Anwendungsebene.
EPSS 2.05% · 79.4th percentile
Risk Scores
CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS Score
2.05%
79.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Oracle E-Business Suite 15.0 | |
| Dell | Dell NetWorker REST API <19.14 | |
| Dell | Dell NetWorker vCenter User Interface <19.14 | |
| VMware Tanzu | VMware Tanzu Spring Framework <6.2.10 | |
| RealObjects | RealObjects PDFreactor <12.5 | |
| SAS Institute | SAS Institute Base SAS <9.4M9 (TS1M9) | |
| IBM | IBM Operational Decision Manager | |
| Dell | Dell NetWorker Management Console <19.14 | |
| Open Source | Open Source Camunda <7.23.5 | |
| Dell | Dell NetWorker File-Level Recovery <19.14 | |
| Open Source | Open Source Camunda <7.21.13 | |
| HCL | HCL Commerce <25.09.17.0 | |
| Open Source | Open Source Camunda <7.22.8 | |
| Dell | Dell Secure Connect Gateway Appliance <5.32.00.18 | |
| IBM | IBM Sterling Connect:Direct | |
| NetApp | NetApp ActiveIQ Unified Manager for Microsoft Windows | |
| RealObjects | RealObjects PDFreactor <12.3 | |
| IBM | IBM Business Automation Workflow | |
| Dell | Dell NetWorker AUTHC <19.14 | |
| Oracle | Oracle E-Business Suite <=12.2.15 |
…and 3 more
Timeline
- Aug 13, 2025 CVE Published
- Aug 18, 2025 EPSS Score
- Aug 18, 2025 Coalition ESS Score
- Aug 18, 2025 CVE Updated
- Aug 26, 2025 EPSS Score
- Aug 26, 2025 Coalition ESS Score
- Sep 3, 2025 EPSS Score
- Sep 11, 2025 EPSS Score
- Sep 20, 2025 EPSS Score
- Sep 28, 2025 EPSS Score
- Oct 4, 2025 Coalition ESS Score
- Oct 6, 2025 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0351.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0351 advisory
- https://www.dell.com/support/kbdoc/de-de/000425429/dsa-2026-023-security-update-for-dell-networker-multiple-third-party-component-vulnerabilities advisory
- https://www.dell.com/support/kbdoc/de-de/000425759/dsa-2026-024-security-update-for-dell-networker-multiple-third-party-component-vulnerabilities advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0862.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0862 advisory
- https://www.pdfreactor.com/pdfreactor-12-5/ advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1192.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1192 advisory
- https://www.oracle.com/security-alerts/cpuapr2026.html#AppendixEBS advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1832.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1832 advisory
- https://spring.io/blog/2025/08/14/spring-framework-6-2-10-release-fixes-cve-2025-41242 advisory
- https://spring.io/security/cve-2025-41242 advisory
- https://docs.camunda.org/security/notices/#notice-145 advisory
- https://www.pdfreactor.com/pdfreactor-12-3-now-available/ advisory
- https://security.netapp.com/advisory/NTAP-20250912-0002 advisory
- https://support.sas.com/en/security-bulletins/sas-security-update-for-sas-94m9-ts1m9.html advisory
- https://www.ibm.com/support/pages/node/7247286 advisory
- https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124532 advisory
…and 4 more