cbcvebase.
CVE-2025-41230
published 2025-05-20

CVE-2025-41230: VMware Cloud Foundation contains an information disclosure vulnerability. A malicious actor with network access to port 443 on VMware Cloud Foundation may…

PriorityP341high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EPSS
0.38%
30.3th percentile
VMware Cloud Foundation contains an information disclosure vulnerability. A malicious actor with network access to port 443 on VMware Cloud Foundation may exploit this issue to gain access to sensitive information.

Affected

2 ranges
VendorProductVersion rangeFixed in
vmwarecloud_foundation——
vmwarecloud_foundation>= 5.x < 5.2.1.25.2.1.2
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.