CVE-2020-5427

7.2 highEPSS 1.1%

High (7.2) in vmware spring cloud data flow. EPSS 1.1% chance of exploitation in the next 30 days.

In Spring Cloud Data Flow, versions 2.6.x prior to 2.6.5, versions 2.5.x prior 2.5.4, an application is vulnerable to SQL injection when requesting task execution.

Severity

CVSS 3.1

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2021-01-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

vmware:spring_cloud_data_flow

References

https://tanzu.vmware.com/security/cve-2020-5427
https://tanzu.vmware.com/security/cve-2020-5427

Check your stack JSON