Pivotal Spring Security vulnerabilities

• pivotal spring security oauth, spring security oauth +1 more Privilege Escalation in spring-security-oauth2 CVE-2018-15758 Fix available 9.6 CriticalOctober 18, 2018
• pivotal spring security oauth, spring security oauth +1 more Spring Security OAuth vulnerable to remote code execution (RCE) CVE-2018-1260 Public exploitFix available EPSS 10.6% 9.8 CriticalMay 11, 2018
• pivotal spring framework, spring security, spring security +2 more Spring Security and Spring Framework may not recognize certain paths that should be protected CVE-2016-5007 Fix available 7.5 HighMay 25, 2017
• pivotal spring security oauth, spring security oauth +1 more Spring Security OAuth vulnerable to remote code execution (RCE) via specially crafted request using whitelabel views CVE-2016-4977 Public exploitFix available EPSS 79.2% 8.8 HighMay 25, 2017
• pivotal spring security, spring security +1 more Authorization Bypass in Spring Security CVE-2014-3527 Fix available 9.8 CriticalMay 25, 2017
• pivotal spring security, spring security +1 more Improper Authentication in Spring Security CVE-2014-0097 Fix available 7.3 HighMay 25, 2017