CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 1–1 of 1 records

CVE Vendor Product Added Due Status
CVE-2020-5410 — VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability
Spring, by VMware Tanzu, Cloud Config contains a path traversal vulnerability that allows applications to serve arbitrary configuration files.
VMware Tanzu Spring Cloud Configuration (Config) Server Mar 25, 2022 Apr 15, 2022