Vulnerability · Published Jul 29, 2025 · Assigned by vmware
CVE-2025-41241Denial-of-service vulnerability
Medium 4.4
In plain English
A medium-severity security flaw in Cloud Foundation from VMware. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 27% of all known vulnerabilities).
Severity (CVSS 3.1)4.4Medium
Exploit odds (30 days)0.3%top 72.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
VMware vCenter contains a denial-of-service vulnerability. A malicious actor who is authenticated through vCenter and has permission to perform API calls for guest OS customisation may trigger this vulnerability to create a denial-of-service condition.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| VMware | vCenter | 8.0 – before 8.0 U3g7.0 – before 7.0 U3v |
| VMware | Cloud Foundation | 5.x, 4.5.x |
| VMware | Telco Cloud Platform | 5.x, 2.x |
| VMware | Telco Cloud Infrastructure | 2.x |
Weakness: CWE-754 · Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H