Spring by VMware Tanzu
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Spring Cloud Function Framework | 1 | – | Jul 9, 2024 |
| Spring Cloud Skipper | 1 | – | Jun 19, 2024 |
| Spring Security | 1 | – | Dec 2, 2024 |
Exploited and recent CVEs
- CVE-2024-38827 Spring Security Authorization Bypass for Case Sensitive Comparisons 0.4%
- CVE-2024-22271 Spring Cloud Function Web DOS Vulnerability 0.4%
- CVE-2024-22263 Arbitrary File Write Vulnerability in Spring Cloud Data Flow 17.5%