Pivotal Software Spring Security vulnerabilities

• pivotal software spring security, spring security +1 more Erroneous authentication pass in Spring Security CVE-2024-22257 Fix available 8.2 HighMarch 18, 2024
• pivotal software spring security, spring security, oracle communications element manager +5 more +7 more Privilege escalation in spring security CVE-2021-22112 Fix available 8.8 HighFebruary 23, 2021
• pivotal software spring security, spring security +1 more Dictionary attack with Spring Security queryable text encryptor CVE-2020-5408 Fix available 6.5 MediumMay 14, 2020
• pivotal software spring security, spring security +1 more Signature Wrapping Vulnerability with spring-security-saml2-service-provider CVE-2020-5407 Fix available 8.8 HighMay 13, 2020
• pivotal software spring security oauth, spring security oauth, oracle banking corporate lending +2 more Open Redirector in spring-security-oauth2 CVE-2019-11269 Public exploitFix available 4.2 MediumJune 12, 2019
• pivotal software spring security oauth, spring security oauth, oracle banking corporate lending +2 more Open Redirect in spring-security-oauth2 CVE-2019-3778 Public exploitFix available EPSS 16.6% 6.5 MediumMarch 7, 2019
• pivotal spring security oauth, spring security oauth +1 more Privilege Escalation in spring-security-oauth2 CVE-2018-15758 Fix available 9.6 CriticalOctober 18, 2018
• pivotal spring security oauth, spring security oauth +1 more Spring Security OAuth vulnerable to remote code execution (RCE) CVE-2018-1260 Public exploitFix available EPSS 10.6% 9.8 CriticalMay 11, 2018
• pivotal spring framework, pivotal software spring security, netapp oncommand insight +39 more +41 more Spring Framework when used in combination with any versions of Spring Security contains an authorization bypass CVE-2018-1258 Fix available 8.8 HighMay 11, 2018