Known vulnerabilities in Spring for Apache Kafka 3.0.6

Vendor: Broadcom
Version: 3.0.6
Software CPE: cpe:2.3:a:broadcom:spring_for_apache_kafka:*:*:*:*:*:*:*:*
Total vulnerabilities: 2
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Spring for Apache Kafka version 3.0.6 Spring for Apache Kafka 3.0.6 is affected by 2 vulnerabilities: 2 medium Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83312 - Authorization Bypass Through User-Controlled Key
CVE-2023-44981
CWE-639 Medium
No
No
3.0.13, 3.1.0 20.11.2023 SB2023112072
SB2023112073
SB2023112077
and 45 more
#VU79928 - Deserialization of Untrusted Data
CVE-2023-34040
CWE-502 Medium
Public exploit available
No
2.9.11, 3.0.10 23.08.2023 SB2023082369
SB2023110816
SB2023121130
and 3 more