Spring Cloud Data Flow (Vmware) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 134 known versions, newest CVE from 2024-07-25. Vendor: Vmware.

CVEs of Spring Cloud Data Flow

• CVE-2024-37084 - CVSS 9.8 (critical), 2024-07-25: In Spring Cloud Data Flow versions prior to 2.11.4,  a malicious user who has access to the Skipper server api can use a crafted upload request to write an…
• CVE-2020-5427 - CVSS 7.2 (high), 2021-01-27: In Spring Cloud Data Flow, versions 2.6.x prior to 2.6.5, versions 2.5.x prior 2.5.4, an application is vulnerable to SQL injection when requesting task…