Known vulnerabilities in Spring Cloud Function
Vendor:
VMware, Inc
Software:
Spring Cloud Function
Software CPE:
cpe:2.3:a:vmware:spring_cloud_function:*:*:*:*:*:*:*:*
Website:
https://www.vmware.com
Total vulnerabilities:
4
Public exploits:
1
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
5.0.3
4.3.4
4.2.6
4.2.5
3.2.16
3.2.15
3.2.14
3.2.13
5.0.2
4.3.3
4.3.2
5.0.1
4.3.1
4.2.4
5.0.0
4.2.3
4.1.6
4.3.0
4.2.2
4.2.1
4.1.5
4.2.0
4.1.4
4.1.3
4.1.2
4.1.1
4.0.6
3.2.12
4.1.0
4.0.5
4.0.4
3.2.11
4.0.3
3.2.10
4.0.2
3.2.9
3.2.8
4.0.0
4.0.1
3.2.7
3.2.6
3.2.5
3.2.4
3.2.3
3.2.2
3.2.1
3.2.0
3.1.7
3.1.6
3.1.5
3.1.4
3.1.3
3.1.2
3.1.1
3.1.0
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU130981 - Resource exhaustion CVE-2026-40990 |
CWE-400 | Low | 3.2.16, 4.2.6, 4.3.3, 5.0.2 | 11.05.2026 |
SB2026051172 |
||
| #VU130980 - Uncontrolled Recursion CVE-2026-40989 |
CWE-674 | Low | 3.2.16, 4.2.6, 4.3.3, 5.0.2 | 11.05.2026 |
SB2026051172 |
||
| #VU64423 - Improper input validation CVE-2022-22979 |
CWE-20 | Medium | 3.2.6 | 16.06.2022 |
SB2022061605 SB20230418111 SB20240117108 and 8 more |
||
| #VU61754 - Improper Control of Generation of Code ('Code Injection') CVE-2022-22963 |
CWE-94 | Critical | 3.1.7, 3.2.3 | 31.03.2022 |
SB2022033107 SB2022041275 SB2022060214 and 15 more |