CVE-2023-34039
Unauthenticated security bypass in Spring Cloud Gateway
CVSS 9.8 (Critical)
EPSS 0.1850 (1th pct)
Technical Description
Unauthenticated security bypass in Spring Cloud Gateway.
Why this matters to your organisation:
The Exploit Prediction Scoring System (EPSS) estimates a 18.5% probability of exploitation within 30 days. The affected service is internet-facing, increasing exposure. This is a critical service for the organisation.
The Exploit Prediction Scoring System (EPSS) estimates a 18.5% probability of exploitation within 30 days. The affected service is internet-facing, increasing exposure. This is a critical service for the organisation.
Potential Impact
A vulnerability in spring_cloud_gateway rated Critical (CVSS 9.8).
✅ Recommended Next Action
Review CVE-2023-34039 and confirm whether spring_cloud_gateway is in use.
Confidence: Not Applicable
The organisation does not use this product.
CVE Details
| Product | vmware spring_cloud_gateway |
| Version Range | < 3.1.9 → ∞ |
| Installed | Unknown |
| Match Type | Product Not Used |
| CVSS | 9.8 |
| KEV | No |
| EPSS | 0.185 |
| Source |
NVD · July 20, 2023 View reference ↗ |
Score Breakdown
🌐 Exposure+20
⭐ Importance+15
📈 EPSS+2.8
🔢 CVSS+9.8
⚠ Uncertainty-10
Total38