VDB
CVE-2025-41245
CVE-2025-41245
PUBLISHED
VMware Cloud Foundation ist eine Hybrid Cloud-Plattform für VM-Management und Container-Orchestrierung. Die Virtualisierungssoftware von VMware ermöglicht die simultane Ausführung von verschiedenen Betriebssystemen auf einem Host-System. VMware Aria Operations bietet eine einheitliche Plattform für das IT-Betriebsmanagement in Private-, Hybrid- und Multi-Cloud-Umgebungen. VMware Tools sind Applikationen und Treiber, mit denen die Gast-Betriebssysteme in einer virtuellen Maschine unter VMware zusätzliche Funktionalitäten erhalten.
EPSS 0.58% · 44.7th percentile
Risk Scores
EPSS Score
0.58%
44.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| VMware | VMware Tools <13.0.5 | |
| VMware | VMware Aria Operations <8.18.5 | |
| SUSE | SUSE openSUSE | |
| VMware | VMware Tools <13.0.5.0 | |
| Red Hat | Red Hat Enterprise Linux | |
| Oracle | Oracle Linux | |
| VMware | VMware vSphere Foundation <9.0.1.0 | |
| SUSE | SUSE Linux | |
| VMware | VMware Tools <12.5.4 | |
| Ubuntu | Ubuntu Linux | |
| RESF | RESF Rocky Linux | |
| VMware | VMware Cloud Foundation <9.0.1.0 | |
| IBM | IBM DataPower Gateway <11.0.0.2 | |
| Amazon | Amazon Linux 2 | |
| Debian | Debian Linux | |
| Dell | Dell Secure Connect Gateway Appliance <5.32.00.18 |
Timeline
- Sep 29, 2025 CVE Published
- Sep 30, 2025 EPSS Score
- Sep 30, 2025 CVE Updated
- Oct 4, 2025 Coalition ESS Score
- Oct 6, 2025 Coalition ESS Score
- Oct 7, 2025 EPSS Score
- Oct 13, 2025 EPSS Score
- Oct 17, 2025 Coalition ESS Score
- Oct 20, 2025 EPSS Score
- Oct 27, 2025 EPSS Score
- Oct 27, 2025 Coalition ESS Score
- Nov 2, 2025 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2153.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2153 advisory
- https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36149 advisory
- https://ubuntu.com/security/notices/USN-7785-1 advisory
- https://blog.nviso.eu/2025/09/29/you-name-it-vmware-elevates-it-cve-2025-41244/ advisory
- https://lists.suse.com/pipermail/sle-security-updates/2025-September/022754.html advisory
- https://lists.suse.com/pipermail/sle-security-updates/2025-September/022756.html advisory
- https://lists.suse.com/pipermail/sle-security-updates/2025-September/022757.html advisory
- https://lists.debian.org/debian-lts-announce/2025/10/msg00000.html advisory
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6FFLQJU5BBI6GWWX67GFA2MKF6XI4DNC/ advisory
- https://access.redhat.com/errata/RHSA-2025:17429 advisory
- https://access.redhat.com/errata/RHSA-2025:17446 advisory
- https://access.redhat.com/errata/RHSA-2025:17452 advisory
- https://linux.oracle.com/errata/ELSA-2025-17428.html advisory
- https://linux.oracle.com/errata/ELSA-2025-17429.html advisory
- https://access.redhat.com/errata/RHSA-2025:17511 advisory
- https://access.redhat.com/errata/RHSA-2025:17445 advisory
- https://access.redhat.com/errata/RHSA-2025:17428 advisory
- https://linux.oracle.com/errata/ELSA-2025-17509.html advisory
- https://access.redhat.com/errata/RHSA-2025:17510 advisory
…and 15 more