Threat database

CVE-2022-22963 is a high severity remote code execution vulnerability in VMware Tanzu Spring Cloud Function. It arises from the routing functionality where a specially crafted Spring Expression Language (SpEL) routing-expression can be used by an attacker to execute arbitrary code and access local resources. This vulnerability has been exploited in the wild.

CVE-2020-5410 is a path traversal vulnerability in VMware Tanzu's Spring Cloud Config Server that allows attackers to access arbitrary configuration files. This vulnerability has been exploited in the wild and is considered high severity. No specific affected versions or patch information is provided in the available data.

CVE-2018-1273 is a high-severity vulnerability in VMware Tanzu Spring Data Commons involving a property binder flaw that allows remote code execution. It has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.