How many spring-cloud spring-cloud-dataflow CVEs are in CISA KEV?

None of spring-cloud spring-cloud-dataflow's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for spring-cloud spring-cloud-dataflow vulnerabilities?

Yes — 1 of spring-cloud spring-cloud-dataflow's CVEs have a known public exploit.

Which versions of spring-cloud spring-cloud-dataflow are affected?

3 distinct spring-cloud spring-cloud-dataflow versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in spring-cloud spring-cloud-dataflow CVEs?

spring-cloud spring-cloud-dataflow's CVEs most often map to these CWE weakness types: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-94 (Improper Control of Generation of Code ('Code Injection')).

How many critical spring-cloud spring-cloud-dataflow vulnerabilities are there?

spring-cloud spring-cloud-dataflow has 1 critical and 1 high-severity CVEs.

What is the average severity of spring-cloud spring-cloud-dataflow CVEs?

The average CVSS base score across spring-cloud spring-cloud-dataflow's scored CVEs is 8.3.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

spring-cloud

2 CVEs

spring-cloud spring-cloud-dataflow Vulnerabilities

Name: spring-cloud spring-cloud-dataflow vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for spring-cloud-dataflow by spring-cloud.

2

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

1

Public exploits

PoC or exploit code

8.3

Avg CVSS

2021–2024

Last updated July 25, 2024

Overview

spring-cloud spring-cloud-dataflow has 2 published CVE records since 2021, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 8.3.

This page aggregates every publicly disclosed vulnerability (CVE) affecting spring-cloud spring-cloud-dataflow, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of spring-cloud spring-cloud-dataflow's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High1

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of spring-cloud spring-cloud-dataflow's CVEs are currently listed in CISA's KEV catalog.

Public exploits

1

One of spring-cloud spring-cloud-dataflow's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every spring-cloud spring-cloud-dataflow version named in a CVE, then pick one to see only the CVEs that affect it.

Fixed in

1a5e721b4313f9a438c829f74f017a6bda07f5e91 CVE
28f287093ec64011ab9de6e81f408b3fd6b33f971 CVE
7b8b94ae5f7d08b8bb1a868e8c65da01f2bc15201 CVE

Find a version

2 CVEs

Sort

Critical vulnerability · 2024-07-25
CVE-2024-37084
Public exploit
Patch
CWE-94
Critical · CVSS 9.3
EPSS 35.2% (98th pct)2024-07-25
High vulnerability · 2021-01-27
CVE-2020-5427
Patch
CWE-89
High · CVSS 7.2
EPSS 1.1% (61th pct)2021-01-27

Common weakness types

The CWE weakness categories most often found in spring-cloud spring-cloud-dataflow CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many spring-cloud spring-cloud-dataflow CVEs were published each year.

2021

1

2024

1

Other spring-cloud products

Browse vulnerabilities for other products by spring-cloud.

spring-cloud-config8 CVEs org.springframework.cloud:spring-cloud-config-server7 CVEs spring-cloud-function4 CVEs spring-cloud-gateway4 CVEs org.springframework.cloud:spring-cloud-function-context3 CVEs org.springframework.cloud:spring-cloud-gateway-server2 CVEs spring-cloud-netflix2 CVEs org.springframework.cloud:spring-cloud-contract-shade1 CVEs

All spring-cloud vulnerabilities

Frequently asked questions

Common questions about spring-cloud spring-cloud-dataflow vulnerabilities.

How many CVEs does spring-cloud spring-cloud-dataflow have?: spring-cloud spring-cloud-dataflow has 2 published CVE records since 2021.
How many spring-cloud spring-cloud-dataflow CVEs are in CISA KEV?: None of spring-cloud spring-cloud-dataflow's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for spring-cloud spring-cloud-dataflow vulnerabilities?: Yes — 1 of spring-cloud spring-cloud-dataflow's CVEs have a known public exploit.
Which versions of spring-cloud spring-cloud-dataflow are affected?: 3 distinct spring-cloud spring-cloud-dataflow versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in spring-cloud spring-cloud-dataflow CVEs?: spring-cloud spring-cloud-dataflow's CVEs most often map to these CWE weakness types: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-94 (Improper Control of Generation of Code ('Code Injection')).
How many critical spring-cloud spring-cloud-dataflow vulnerabilities are there?: spring-cloud spring-cloud-dataflow has 1 critical and 1 high-severity CVEs.
What is the average severity of spring-cloud spring-cloud-dataflow CVEs?: The average CVSS base score across spring-cloud spring-cloud-dataflow's scored CVEs is 8.3.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track spring-cloud spring-cloud-dataflow vulnerabilities

Monitor new spring-cloud spring-cloud-dataflow vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing