[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$flM4REAc7f1Vx09bcsGWNGGBPJdd5rMyWBbggrwDVwFg":3,"g5a-family:vmware\u002Fspring_cloud_config":207,"g5a-ex:vmware\u002Fspring_cloud_config@*":208},{"success":4,"data":5},true,{"product":6,"versions":107,"topVulnerabilitiesByEpss":153,"kevVulnerabilities":179,"seoMetadata":185,"meta":204},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":106},"vmware","spring_cloud_config",45,4,1,"2023-03-23",[14,18,20,22,24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86,88,90,92,94,96,98,100,102,104],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"1.0.0",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"1.0.1",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"1.0.3",{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},"1.0.4",{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},"1.1.0",{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},"1.1.1",{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},"1.1.2",{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},"1.1.3",{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},"1.2.0",{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},"1.2.1",{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},"1.2.2",{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},"1.2.3",{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},"1.3.0",{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},"1.3.1",{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},"1.3.2",{"version":47,"cve_count":16,"kev_count":16,"has_kev":17},"1.3.4",{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.0",{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.1",{"version":53,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.2",{"version":55,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.3",{"version":57,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.4",{"version":59,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.5",{"version":61,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.6",{"version":63,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.7",{"version":65,"cve_count":16,"kev_count":16,"has_kev":17},"2.0.0",{"version":67,"cve_count":16,"kev_count":16,"has_kev":17},"2.0.1",{"version":69,"cve_count":16,"kev_count":16,"has_kev":17},"2.0.2",{"version":71,"cve_count":16,"kev_count":16,"has_kev":17},"2.0.3",{"version":73,"cve_count":16,"kev_count":16,"has_kev":17},"2.0.4",{"version":75,"cve_count":16,"kev_count":16,"has_kev":17},"2.0.5",{"version":77,"cve_count":16,"kev_count":16,"has_kev":17},"2.1.0",{"version":79,"cve_count":16,"kev_count":16,"has_kev":17},"2.1.1",{"version":81,"cve_count":16,"kev_count":16,"has_kev":17},"2.1.2",{"version":83,"cve_count":16,"kev_count":16,"has_kev":17},"2.1.3",{"version":85,"cve_count":16,"kev_count":16,"has_kev":17},"2.1.4",{"version":87,"cve_count":16,"kev_count":16,"has_kev":17},"2.1.5",{"version":89,"cve_count":16,"kev_count":16,"has_kev":17},"2.1.6",{"version":91,"cve_count":16,"kev_count":16,"has_kev":17},"2.1.7",{"version":93,"cve_count":16,"kev_count":16,"has_kev":17},"2.1.8",{"version":95,"cve_count":16,"kev_count":16,"has_kev":17},"2.1.9",{"version":97,"cve_count":16,"kev_count":16,"has_kev":17},"2.2.0",{"version":99,"cve_count":16,"kev_count":16,"has_kev":17},"2.2.1",{"version":101,"cve_count":16,"kev_count":16,"has_kev":17},"2.2.2",{"version":103,"cve_count":16,"kev_count":16,"has_kev":17},"2.2.3",{"version":105,"cve_count":16,"kev_count":16,"has_kev":17},"3.0.0","Spring Cloud Config by Vmware is a technology product with 45 tracked versions and 4 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},{"version":47,"cve_count":16,"kev_count":16,"has_kev":17},{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},{"version":53,"cve_count":16,"kev_count":16,"has_kev":17},{"version":55,"cve_count":16,"kev_count":16,"has_kev":17},{"version":57,"cve_count":16,"kev_count":16,"has_kev":17},{"version":59,"cve_count":16,"kev_count":16,"has_kev":17},{"version":61,"cve_count":16,"kev_count":16,"has_kev":17},{"version":63,"cve_count":16,"kev_count":16,"has_kev":17},{"version":65,"cve_count":16,"kev_count":16,"has_kev":17},{"version":67,"cve_count":16,"kev_count":16,"has_kev":17},{"version":69,"cve_count":16,"kev_count":16,"has_kev":17},{"version":71,"cve_count":16,"kev_count":16,"has_kev":17},{"version":73,"cve_count":16,"kev_count":16,"has_kev":17},{"version":75,"cve_count":16,"kev_count":16,"has_kev":17},{"version":77,"cve_count":16,"kev_count":16,"has_kev":17},{"version":79,"cve_count":16,"kev_count":16,"has_kev":17},{"version":81,"cve_count":16,"kev_count":16,"has_kev":17},{"version":83,"cve_count":16,"kev_count":16,"has_kev":17},{"version":85,"cve_count":16,"kev_count":16,"has_kev":17},{"version":87,"cve_count":16,"kev_count":16,"has_kev":17},{"version":89,"cve_count":16,"kev_count":16,"has_kev":17},{"version":91,"cve_count":16,"kev_count":16,"has_kev":17},{"version":93,"cve_count":16,"kev_count":16,"has_kev":17},{"version":95,"cve_count":16,"kev_count":16,"has_kev":17},{"version":97,"cve_count":16,"kev_count":16,"has_kev":17},{"version":99,"cve_count":16,"kev_count":16,"has_kev":17},{"version":101,"cve_count":16,"kev_count":16,"has_kev":17},{"version":103,"cve_count":16,"kev_count":16,"has_kev":17},{"version":105,"cve_count":16,"kev_count":16,"has_kev":17},[154,162,169,174],{"cveId":155,"description":156,"publishedDate":157,"cvssScore":158,"cvssVersion":159,"severity":160,"isKev":4,"epssScore":161},"CVE-2020-5410","Spring Cloud Config, versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request using a specially crafted URL that can lead to a directory traversal attack.","2020-06-02",7.5,"v3.1","High",0.95586,{"cveId":163,"description":164,"publishedDate":165,"cvssScore":166,"cvssVersion":159,"severity":167,"isKev":17,"epssScore":168},"CVE-2019-3799","Spring Cloud Config, versions 2.1.x prior to 2.1.2, versions 2.0.x prior to 2.0.4, and versions 1.4.x prior to 1.4.6, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request using a specially crafted URL that can lead a directory traversal attack.","2019-05-06",6.5,"Medium",0.85295,{"cveId":170,"description":171,"publishedDate":172,"cvssScore":166,"cvssVersion":159,"severity":167,"isKev":17,"epssScore":173},"CVE-2020-5405","Spring Cloud Config, versions 2.2.x prior to 2.2.2, versions 2.1.x prior to 2.1.7, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request using a specially crafted URL that can lead a directory traversal attack.","2020-03-05",0.68542,{"cveId":175,"description":176,"publishedDate":12,"cvssScore":177,"cvssVersion":159,"severity":167,"isKev":17,"epssScore":178},"CVE-2023-20859","In Spring Vault, versions 3.0.x prior to 3.0.2 and versions 2.3.x prior to 2.3.3 and older versions, an application is vulnerable to insertion of sensitive information into a log file when it attempts to revoke a Vault batch token.",5.5,0.00223,[180],{"cveId":155,"description":156,"publishedDate":157,"cvssScore":158,"severity":160,"isKev":4,"epssScore":161,"cisaVulnName":181,"cisaDateAdded":182,"cisaShortDescription":183,"cisaRequiredAction":184},"VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability","2022-03-25","Spring, by VMware Tanzu, Cloud Config contains a path traversal vulnerability that allows applications to serve arbitrary configuration files.","Apply updates per vendor instructions.",{"title":186,"metaDescription":187,"keywords":188,"structuredData":189},"Spring Cloud Config by Vmware - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Spring Cloud Config by Vmware covering 45 versions with 4 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Spring Cloud Config vulnerabilities, Spring Cloud Config security, Spring Cloud Config CVE, Vmware Spring Cloud Config, Spring Cloud Config threat intelligence, Vmware security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Spring Cloud Config KEV, Spring Cloud Config exploited vulnerabilities",{"@context":190,"@type":191,"name":192,"description":187,"url":193,"manufacturer":194,"applicationCategory":198,"softwareVersion":199,"mainEntity":200},"https:\u002F\u002Fschema.org","SoftwareApplication","Spring Cloud Config","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fvmware\u002Fspring_cloud_config",{"@type":195,"name":196,"url":197},"Organization","Vmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fvmware","Security Software","45 versions tracked",{"@type":201,"name":202,"description":203,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Spring Cloud Config Security Vulnerabilities","Security vulnerabilities affecting Spring Cloud Config by Vmware",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":205,"apiVersion":206},"2026-10-18T21:21:19.368Z","3.0",[],{"rows":209,"total":11,"capped":17,"failed":16},[210],{"cveId":155,"name":181,"severity":160,"cvss":158,"added":182,"epss":161,"published":211,"ranges":212,"checked":4,"hits":215,"covers":17},"2020-06-02T17:15:11.69",[213,214],"2.1.0 to before 2.1.9","2.2.0 to before 2.2.3",[]]