Skip to contentSpring vulnerabilities
Newest
- pivotal spring security oauth, spring security oauth, oracle communications design studio +2 moreDenial of service in Spring Security OAuth2CVE-2022-22969Fix available6.5 Medium
- spring amqp, vmware spring advanced message queuing protocol +1 moreDeserialization of Untrusted Data in Spring AMQPCVE-2021-22095Fix available6.5 Medium
- spring amqp, vmware spring advanced message queuing protocol +1 moreDeserialization of Untrusted Data in Spring AMQPCVE-2021-22097Fix available6.5 Medium
- spring security, vmware spring security, oracle communications cloud native core policy +2 moreResource Exhaustion in Spring SecurityCVE-2021-22119Public exploitFix available7.5 High
- pivotal software spring security, spring security, oracle communications element manager +5 more +7 morePrivilege escalation in spring securityCVE-2021-22112Fix available8.8 High
- spring cloud data flow, vmware spring cloud data flow +1 morePossibility of SQL Injection in Spring Cloud Data Flow Task Execution Sorting QueryCVE-2020-5427Fix available5.7 Medium
- spring cloud config, vmware spring cloud config, vmware tanzu spring cloud configuration (config) server +2 moreDirectory Traversal with spring-cloud-config-serverCVE-2020-5410In KEVPublic exploitFix availableEPSS 95.6%7.5 High
- pivotal software spring security, spring security +1 moreDictionary attack with Spring Security queryable text encryptorCVE-2020-5408Fix available6.5 Medium
- pivotal software spring security, spring security +1 moreSignature Wrapping Vulnerability with spring-security-saml2-service-providerCVE-2020-5407Fix available8.8 High
- spring cloud config, vmware spring cloud config +1 moreDirectory Traversal with spring-cloud-config-serverCVE-2020-5405Public exploitFix availableEPSS 68.5%6.5 Medium
- spring framework, vmware spring framework, oracle application testing suite +25 more +27 moreCSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFluxCVE-2020-5397Fix available5.3 Medium
- spring framework, vmware spring framework, netapp data availability services +31 more +33 moreRFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux ApplicationCVE-2020-5398Public exploitFix availableEPSS 88.3%8.0 High
- spring security, vmware spring security, debian linux +2 morePlaintextPasswordEncoder authenticates encoded passwords that are nullCVE-2019-11272Fix available7.3 High
- pivotal software spring security oauth, spring security oauth, oracle banking corporate lending +2 moreOpen Redirector in spring-security-oauth2CVE-2019-11269Public exploitFix available4.2 Medium
- spring data jpa, pivotal software spring data java persistance api +1 moreAdditional information exposure with Spring Data JPA example matcherCVE-2019-3802Fix available3.5 Low
- spring cloud config, vmware spring cloud config, oracle communications cloud native core policy +2 moreDirectory Traversal with spring-cloud-config-serverCVE-2019-3799Public exploitFix availableEPSS 85.3%6.5 Medium
- pivotal software spring data java persistence api, spring boot +1 moreAdditional information exposure with Spring Data JPA derived queriesCVE-2019-3797Fix available3.5 Low
- spring security, vmware spring security, debian linux +2 moreInsecure Randomness When Using a SecureRandom Instance Constructed by Spring SecurityCVE-2019-3795Fix available3.8 Low
- pivotal software spring security oauth, spring security oauth, oracle banking corporate lending +2 moreOpen Redirect in spring-security-oauth2CVE-2019-3778Public exploitFix availableEPSS 16.6%6.5 Medium
- broadcom spring batch, spring batch +1 moreSpring Batch XML External Entity Injection (XXE)CVE-2019-3774Fix available9.8 Critical
- broadcom spring web services, spring web services, oracle financial services analytical applications infrastructure +1 more +3 moreSpring Web Services XML External Entity Injection (XXE)CVE-2019-3773Fix available9.8 Critical
- spring integration, vmware spring integration, oracle retail customer management and segmentation foundation +2 moreSpring Integration XML External Entity Injection (XXE)CVE-2019-3772Fix available9.8 Critical
- spring security, vmware spring framework +1 moreAuthorization Bypass During JWT Issuer Validation with spring-securityCVE-2018-15801Fix available3.3 Low
- pivotal spring security oauth, spring security oauth +1 morePrivilege Escalation in spring-security-oauth2CVE-2018-15758Fix available9.6 Critical
- pivotal spring amqp, spring amqp, pivotal software spring advanced message queuing protocol +1 more +3 moreTLS validation errorCVE-2018-11087Fix available5.9 Medium
- pivotal spring security oauth, spring security oauth +1 moreSpring Security OAuth vulnerable to remote code execution (RCE)CVE-2018-1260Public exploitFix availableEPSS 10.6%9.8 Critical
- dell emc spring boot, spring boot +1 moreModerate severity vulnerability that affects org.springframework.boot:spring-bootCVE-2018-1196Fix available5.9 Medium
- pivotal spring framework, spring security, spring security +2 moreSpring Security and Spring Framework may not recognize certain paths that should be protectedCVE-2016-5007Fix available7.5 High
- pivotal spring security oauth, spring security oauth +1 moreSpring Security OAuth vulnerable to remote code execution (RCE) via specially crafted request using whitelabel viewsCVE-2016-4977Public exploitFix availableEPSS 80.0%8.8 High
- pivotal spring security, spring security +1 moreAuthorization Bypass in Spring SecurityCVE-2014-3527Fix available9.8 Critical
- pivotal spring security, spring security +1 moreImproper Authentication in Spring SecurityCVE-2014-0097Fix available7.3 High