VDB
CVE-2025-41254
CVE-2025-41254
PUBLISHED
Das Spring Framework bietet ein Entwicklungsmodell für Java mit Infrastrukturunterstützung auf Anwendungsebene.
EPSS 0.31% · 21.8th percentile
Risk Scores
EPSS Score
0.31%
21.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Oracle Financial Services Applications 8.1.2.5 | |
| IBM | IBM Operational Decision Manager <8.12.0.1 Interim fix 037 | |
| VMware Tanzu | VMware Tanzu Spring Framework <5.3.46 | |
| Oracle | Oracle Fusion Middleware 22.1.0 | |
| Oracle | Oracle Financial Services Applications 12.0.5.0 | |
| Oracle | Oracle Financial Services Applications 8.1.2.9 | |
| Oracle | Oracle Fusion Middleware 12.1.3.0.0 | |
| Oracle | Oracle Financial Services Applications <=14.12.0.0.0 | |
| IBM | IBM Operational Decision Manager <8.11.0.1 Interim fix 054 | |
| Oracle | Oracle Financial Services Applications 14.8.1.0.0 | |
| VMware Tanzu | VMware Tanzu Spring Framework <6.1.24 | |
| IBM | IBM Operational Decision Manager <8.11.1 Interim fix 053 | |
| VMware Tanzu | VMware Tanzu Spring Framework <6.2.12 | |
| IBM | IBM Operational Decision Manager <9.5.0.1 Interim fix 005 | |
| Oracle | Oracle Financial Services Applications 8.0.8 | |
| Oracle | Oracle Financial Services Applications 11.3.2.0 | |
| Oracle | Oracle Financial Services Applications 8.0.8.1 | |
| Oracle | Oracle Fusion Middleware 8.5.8 | |
| Dell | Dell NetWorker AUTHC <19.14 | |
| Dell | Dell NetWorker vCenter User Interface <19.14 |
…and 26 more
Timeline
- Oct 15, 2025 CVE Published
- Oct 16, 2025 Coalition ESS Score
- Oct 17, 2025 EPSS Score
- Oct 23, 2025 EPSS Score
- Oct 30, 2025 EPSS Score
- Nov 5, 2025 EPSS Score
- Nov 12, 2025 EPSS Score
- Nov 14, 2025 Coalition ESS Score
- Nov 18, 2025 EPSS Score
- Nov 24, 2025 EPSS Score
- Nov 27, 2025 Coalition ESS Score
- Nov 29, 2025 Coalition ESS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2320.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2320 advisory
- https://spring.io/security/cve-2025-41254 advisory
- https://spring.io/blog/2025/10/16/spring-framework-6-2-12-release-fixes-cve-2025-41254 advisory
- https://www.dell.com/support/kbdoc/000503504/dsa-2026-386-security-update-f advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0351.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0351 advisory
- https://www.dell.com/support/kbdoc/de-de/000425429/dsa-2026-023-security-update-for-dell-networker-multiple-third-party-component-vulnerabilities advisory
- https://www.dell.com/support/kbdoc/de-de/000425759/dsa-2026-024-security-update-for-dell-networker-multiple-third-party-component-vulnerabilities advisory
- https://alas.aws.amazon.com/AL2/ALAS2POSTGRESQL14-2026-025.html advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1203.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1203 advisory
- https://www.oracle.com/security-alerts/cpuapr2026.html#AppendixFMW advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1204.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1204 advisory
- https://www.oracle.com/security-alerts/cpuapr2026.html#AppendixIFLX advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0871.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0871 advisory
- https://www.ibm.com/support/pages/node/7267628 advisory