VDB
CVE-2025-41253
CVE-2025-41253
PUBLISHED
VMware Tanzu Spring Cloud ist eine Plattform zur Bereitstellung und Verwaltung von Spring-Anwendungen in Cloud-Umgebungen unter Verwendung von Microservices-Architekturen.
EPSS 0.45% · 36.7th percentile
Risk Scores
EPSS Score
0.45%
36.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Oracle Communications 24.2.1 | |
| Oracle | Oracle Communications 25.2.200 | |
| VMware Tanzu | VMware Tanzu Spring Cloud Gateway <4.3.2 | |
| Oracle | Oracle Communications <=15.0.1.0 | |
| Oracle | Oracle Communications 6.1.1 | |
| Oracle | Oracle Communications 5.0.0 | |
| Oracle | Oracle Communications 7.7.0 | |
| Oracle | Oracle Communications 24.2.4 | |
| Oracle | Oracle Communications <=9.0.4 | |
| Oracle | Oracle Communications <=15.2.0.0.0 | |
| Oracle | Oracle Communications 25.1.100 | |
| Oracle | Oracle Communications 6.0 | |
| Oracle | Oracle Communications 7.5.0 | |
| Oracle | Oracle Communications 47.0.0.1.0 | |
| Oracle | Oracle Communications 47.0 | |
| Oracle | Oracle Communications <=7.5.1 | |
| Oracle | Oracle Communications <=7.8.0 | |
| Oracle | Oracle Communications 4.2.0 | |
| VMware Tanzu | VMware Tanzu Spring Cloud Gateway <4.1.12 | |
| VMware Tanzu | VMware Tanzu Spring Cloud Gateway <4.2.5 |
…and 32 more
Timeline
- Oct 5, 2023 PoC Published
- Apr 28, 2025 PoC Published
- Oct 11, 2025 PoC Published
- Oct 12, 2025 PoC Published
- Oct 15, 2025 CVE Published
- Oct 16, 2025 Coalition ESS Score
- Oct 16, 2025 PoC Published
- Oct 17, 2025 EPSS Score
- Oct 17, 2025 PoC Published
- Oct 17, 2025 PoC Published
- Oct 18, 2025 Coalition ESS Score
- Oct 21, 2025 PoC Published
References
- https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2318.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2318 advisory
- https://spring.io/security/cve-2025-41253 advisory
- https://spring.io/blog/2025/10/15/spring-cloud-gateway-4 advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1194.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1194 advisory
- https://www.oracle.com/security-alerts/cpuapr2026.html#AppendixCGBU advisory