VMware Spring Cloud Function vulnerabilities

12 CVEs affecting VMware Spring Cloud Function, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-59302, published 2026-08-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-22963: VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability, published 2022-04-01. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-08-25. EPSS: 99.9% chance of exploitation in the next 30 days. In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression…
CVE-2022-22979, published 2022-06-21. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. In Spring Cloud Function versions prior to 3.2.6, it is possible for a user who directly interacts with framework provided lookup functionality to cause a denial-of-service condition due to the…
CVE-2024-22271, published 2024-07-09. High severity, CVSS 8.2. EPSS: 0.4% chance of exploitation in the next 30 days. In Spring Cloud Function framework, versions 4.1.x prior to 4.1.2, 4.0.x prior to 4.0.8 an application is vulnerable to a DOS attack when attempting to compose functions with non-existing…
CVE-2026-40990, published 2026-06-01. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. OOM error is possible while attempting to add infinite amount of functions to Function Registry. Affected Spring Products and Versions: Spring Cloud Function 3.2.x: versions prior to 3.2.16 Spring…
CVE-2026-40989, published 2026-06-01. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. Under infinite recursion in the routing layer, request-handling can cause OOM error. Affected Spring Products and Versions: Spring Cloud Function 3.2.x: versions prior to 3.2.16 Spring Cloud…
CVE-2026-59291, published 2026-08-27. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7
CVE-2026-59301, published 2026-08-27. Medium severity, CVSS 4.9. EPSS: 0.2% chance of exploitation in the next 30 days. Potential for logging sensitive data in Spring Cloud Function Azure. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7
CVE-2026-59298, published 2026-08-27. Low severity, CVSS 3.5. EPSS: 0.2% chance of exploitation in the next 30 days. Potential for improper filtering of HTTP headers in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud…
CVE-2026-59300, published 2026-08-27. Low severity, CVSS 3.5. EPSS: 0.2% chance of exploitation in the next 30 days. Potential for logging sensitive data in Spring Cloud Function AWS. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function…
CVE-2026-59299, published 2026-08-27. Low severity, CVSS 3.5. EPSS: 0.2% chance of exploitation in the next 30 days. Composition lookup can potentially poison base function in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring…

Latest

CVE-2026-59302, published 2026-08-27. Medium severity, CVSS 4.9. EPSS: 0.2% chance of exploitation in the next 30 days. Potential for logging sensitive data in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6
CVE-2026-59297, published 2026-08-27. Low severity, CVSS 3.5. EPSS: 0.1% chance of exploitation in the next 30 days. Implementation of isSecure() call of ServerlessHttpServletRequest does not verify the actual scheme. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function…