Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2024-37084

CVE-2024-37084: Remote code execution in Spring Cloud Data Flow

In Spring Cloud Data Flow versions prior to 2.11.4,  a malicious user who has access to the Skipper server api can use a crafted upload request to write an arbitrary file to any location on the file system which could lead to compromising the server

CVSS 3.1 · 9.8 Critical EPSS 35.2% KEV · Not listed
Vendors
Vmware
Products
Spring Cloud Data Flow
CVE-2020-5427

Possibility of SQL Injection in Spring Cloud Data Flow Task Execution Sorting Query

In Spring Cloud Data Flow, versions 2.6.x prior to 2.6.5, versions 2.5.x prior 2.5.4, an application is vulnerable to SQL injection when requesting task execution.

CVSS 3.1 · 7.2 High EPSS 1.1% KEV · Not listed
Vendors
Vmware
Products
Spring Cloud Data Flow