Skip to content
CVE PROGRAM SOURCE RECORD4.4 Medium

CVE-2025-41241

Denial-of-service vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
vmware

Description

VMware vCenter contains a denial-of-service vulnerability. A malicious actor who is authenticated through vCenter and has permission to perform API calls for guest OS customisation may trigger this vulnerability to create a denial-of-service condition.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

VMware vCenter

Default version status: unaffected

  • 8.0 to < 8.0 U3gaffected
  • 7.0 to < 7.0 U3vaffected

VMware Cloud Foundation

Default version status: unaffected

  • 5.x, 4.5.xaffected

VMware Telco Cloud Platform

Default version status: unaffected

  • 5.x, 2.xaffected

VMware Telco Cloud Infrastructure

Default version status: unaffected

  • 2.xaffected

References