CVE-2025-41254

Risk Scores

Exploit Intelligence

• owasp-suppressions-pending.xml (github-poc)
• owasp-suppressions-pending.xml (github-poc)
• owasp-suppressions-pending.xml (github-poc)
• owasp-suppressions-pending.xml (github-poc)
• owasp-suppressions-pending.xml (github-poc)
• owasp-suppressions-pending.xml (github-poc)
• owasp-suppressions-pending.xml (github-poc)
• test_ghsa_completeness.py (github-poc)
• test_ghsa_completeness.py (github-poc)
• test_ghsa_completeness.py (github-poc)

…and 4 more exploits

Timeline

• Oct 16, 2025 CVE Published
• Oct 16, 2025 Coalition ESS Score
• Oct 17, 2025 CVE Updated
• Oct 17, 2025 EPSS Score
• Oct 23, 2025 EPSS Score
• Oct 29, 2025 EPSS Score
• Nov 4, 2025 EPSS Score
• Nov 10, 2025 EPSS Score
• Nov 14, 2025 Coalition ESS Score
• Nov 16, 2025 EPSS Score
• Nov 22, 2025 EPSS Score
• Nov 27, 2025 Coalition ESS Score

References

• https://cert.ssi.gouv.fr/avis/CERTFR-2025-AVI-1024/ advisory
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36459 advisory
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36460 advisory
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36461 advisory
• https://cert.ssi.gouv.fr/avis/CERTFR-2025-AVI-0883/ advisory
• https://spring.io/security/cve-2025-41254 advisory
• https://spring.io/security/cve-2025-41253 advisory
• https://cert.ssi.gouv.fr/avis/CERTFR-2025-AVI-0969/ advisory
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36320 advisory
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36423 advisory
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36364 advisory
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36351 advisory
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36424 advisory
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36412 advisory
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36388 advisory
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36426 advisory
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36411 advisory
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36357 advisory
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36408 advisory
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36349 advisory

…and 61 more