Broadcom Product Security Update Advisory

Overview

 

We have released a security update to fix vulnerabilities in Broadcom products. users of affected products are advised to update to the latest version.
 

 

Affected Products

 

 

VMware Cloud Foundation 5.x Versions

VMware Cloud Foundation 4.5.x Versions

 

 

Resolved Vulnerabilities

 

Path Traversal Vulnerability in VMware Cloud Foundation (CVE-2025-41229) [1][2]

Information Leakage Vulnerability in VMware Cloud Foundation (CVE-2025-41230) [1][3]

Missing Authentication Vulnerability in VMware Cloud Foundation (CVE-2025-41231) [1][4]

 

 

Vulnerability Patches

Vulnerability Patches have been made available in the latest updates. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.

 

VMware Cloud Foundation 5.2.1.2

VMware Cloud Foundation SDDC Manager 4.5.2.0 (KB398008)

 

 

References

 

[1] https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25733

[2] https://nvd.nist.gov/vuln/detail/CVE-2025-41229

[3] https://nvd.nist.gov/vuln/detail/CVE-2025-41230

[4] https://nvd.nist.gov/vuln/detail/CVE-2025-41231