Known vulnerabilities in Spring Cloud Gateway 3.0.4

Vendor: Broadcom
Version: 3.0.4
Software CPE: cpe:2.3:a:broadcom:spring_cloud_gateway:*:*:*:*:*:*:*:*
Total vulnerabilities: 2
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Spring Cloud Gateway version 3.0.4 Spring Cloud Gateway 3.0.4 is affected by 2 vulnerabilities: 1 high, 1 medium Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU109961 - Insufficient Verification of Data Authenticity
CVE-2025-41235
CWE-345 Medium
No
No
3.1.10, 4.0.12, 4.1.8, 4.2.3, 4.3.0 30.05.2025 SB2025053004
SB2025082716
SB2025100115
and 2 more
#VU60982 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-22947
CWE-94 High
Public exploit available
Exploited
3.0.7, 3.1.1 03.03.2022 SB2022030313
SB2022042263
SB2022042264
and 4 more