VDB
CVE-2025-41243
CVE-2025-41243
PUBLISHED
VMware Tanzu Spring Cloud ist eine Plattform zur Bereitstellung und Verwaltung von Spring-Anwendungen in Cloud-Umgebungen unter Verwendung von Microservices-Architekturen.
EPSS 3.31% · 87.4th percentile
Risk Scores
EPSS Score
3.31%
87.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| HCL | HCL Commerce <25.09.17.0 | |
| VMware Tanzu | VMware Tanzu Spring Cloud Gateway <4.3.1 | |
| VMware Tanzu | VMware Tanzu Spring Cloud Gateway <3.1.11 | |
| VMware Tanzu | VMware Tanzu Spring Cloud <2025.0.1 | |
| VMware Tanzu | VMware Tanzu Spring Cloud Gateway <4.1.11 | |
| VMware Tanzu | VMware Tanzu Spring Cloud Gateway <4.2.5 |
Timeline
- Sep 8, 2025 CVE Published
- Sep 9, 2025 PoC Published
- Sep 16, 2025 Coalition ESS Score
- Sep 16, 2025 CVE Updated
- Sep 17, 2025 EPSS Score
- Sep 19, 2025 Coalition ESS Score
- Sep 22, 2025 PoC Published
- Sep 22, 2025 PoC Published
- Sep 24, 2025 EPSS Score
- Sep 26, 2025 Coalition ESS Score
- Oct 1, 2025 PoC Published
- Oct 4, 2025 Coalition ESS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1996.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1996 advisory
- https://spring.io/security/cve-2025-41243 advisory
- https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124532 advisory
- https://spring.io/blog/2025/12/17/spring-cloud-2025-0-1-aka-northfields-has-been-released advisory