Known vulnerabilities in Spring Cloud Config 2.2.1
Vendor:
Broadcom
Software:
Spring Cloud Config
Version:
2.2.1
Software CPE:
cpe:2.3:a:broadcom:spring_cloud_config:*:*:*:*:*:*:*:*
Website:
https://www.broadcom.com/
Total vulnerabilities:
3
Public exploits:
2
Known exploited (KEV):
1
Highest CVSSv4 Score:
8.8
Vulnerabilities by Severity
5.0.5
5.0.4
4.3.4
3.1.14
4.1.10
4.2.7
5.0.3
4.3.3
4.2.6
4.2.5
4.1.9
4.1.8
3.1.13
3.1.12
3.1.11
5.0.2
4.3.2
5.0.1
4.3.1
4.2.4
5.0.0
4.2.3
4.1.7
4.3.0
4.0.10
4.0.9
4.0.8
4.0.7
4.0.6
4.2.2
4.1.6
3.1.10
4.2.1
4.1.5
4.2.0
4.1.4
4.1.3
4.1.2
4.1.1
4.0.5
3.1.9
4.1.0
4.0.4
3.1.8
4.0.3
3.1.7
4.0.2
3.1.6
4.0.1
4.0.0
3.1.5
3.1.4
3.0.7
3.1.3
3.1.2
3.1.1
3.0.6
3.1.0
3.0.5
3.0.4
2.2.8
3.0.3
2.2.7
3.0.2
3.0.1
3.0.0
2.2.6
2.2.5
2.2.4
2.2.3
2.1.9
2.1.8
2.2.2
2.1.7
2.1.6
2.2.1
2.1.5
2.1.4
2.1.3
2.0.5
1.4.7
2.2.0.
2.2.0.RC2
2.2.0.RC1
2.2.0.M3
2.2.0.M2
2.2.0.M1
v2.1.2.
v2.1.1.
v2.1.0.RC3
v2.1.0.RC2
v2.1.0.RC1
v2.1.0.M3
v2.1.0.M2
v2.1.0.M1
v2.1.0.
v2.0.4.
v2.0.3.
v2.0.2.
v2.0.1.
v2.0.0.RC2
v2.0.0.RC1
v2.0.0.M9
v2.0.0.M8
v2.0.0.M7
v2.0.0.M6
v2.0.0.M5
v2.0.0.M4
v2.0.0.M3
v2.0.0.M2
v2.0.0.M1
v2.0.0.
v1.4.6.
v1.4.5.
v1.4.4.
v1.4.3.
v1.4.2.
v1.4.1.
v1.4.0.RC1
v1.4.0.M1
v1.4.0.
v1.3.4.
v1.3.3.
v1.3.2.
v1.3.1.
v1.3.0.RC1
v1.3.0.M2
v1.3.0.M1
v1.3.0.
v1.2.3.
v1.2.2.
v1.2.1.
v1.2.0.RC1
v1.2.0.M1
v1.2.0.
v1.1.3.
v1.1.2.
v1.1.1.
v1.1.0.RC2
v1.1.0.RC1
v1.1.0.M5
v1.1.0.M4
v1.1.0.M3
v1.1.0.M2
v1.1.0.M1
1.1.0.
1.0.4.
1.0.3.
1.0.1.
1.0.0.RC3
1.0.0.RC2
1.0.0.RC1
1.0.0.M4
1.0.0.M3
1.0.0.
1.0.0.M1
Vulnerabilities (3)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU107154 - Improper Authorization CVE-2025-22232 |
CWE-285 | Medium | 3.1.10, 4.0.10, 4.1.6, 4.2.1 | 08.04.2025 |
SB2025040845 |
||
| #VU28498 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2020-5410 |
CWE-22 | Medium | 2.1.9, 2.2.3 | 02.06.2020 |
SB2020060202 SB20240117118 |
||
| #VU30340 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2020-5405 |
CWE-22 | Medium | 2.2.2 | 05.03.2020 |
SB2020030518 |