VMware Spring Cloud Gateway Server MVC

1 published vulnerability names this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2025-412354.1.7 - 4.2.2, 4.3.0-{M1, M2, RC1} – < 4.3.0, 4.2.3, 4.1.8CVE-2025-41235: Spring Cloud Gateway Server Forwards Headers from Untrusted ProxiesHIGH 8.60.4 %