Known vulnerabilities in Spring Cloud Data Flow 2.11.1

Vendor: Broadcom
Version: 2.11.1
Software CPE: cpe:2.3:a:broadcom:spring_cloud_data_flow:*:*:*:*:*:*:*:*
Total vulnerabilities: 2
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Spring Cloud Data Flow version 2.11.1 Spring Cloud Data Flow 2.11.1 is affected by 2 vulnerabilities: 2 medium Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU94730 - Unrestricted Upload of File with Dangerous Type
CVE-2024-37084
CWE-434 Medium
Public exploit available
No
2.11.4 25.07.2024 SB2024072513
#VU89866 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-22263
CWE-22 Medium
Public exploit available
No
2.11.3 29.05.2024 SB2024052920