Springsource vulnerabilities

Products

• Spring Framework 5
• Application Management Suite 3
• Hyperic Hq 3
• Tc Server 3

Newest

• springsource spring framework Cross-Site Request Forgery in Spring Framework CVE-2014-0054 Fix available EPSS 91.4% 6.8 MediumMarch 29, 2014
• springsource spring framework Missing XML Validation in Spring Framework CVE-2013-7315 Fix available 6.8 MediumJanuary 13, 2014
• springsource spring framework Cross-Site Request Forgery in Spring Framework CVE-2013-4152 Fix available EPSS 25.6% 6.8 MediumJanuary 13, 2014
• springsource grails VMware SpringSource Grails before 1.3.8, and 2.x before 2.0.2, does not properly restrict data... CVE-2012-1833 5.0 MediumSeptember 28, 2012
• springsource spring framework Improper Neutralization of Directives in Dynamically Evaluated Code in Spring Framework CVE-2011-2730 Fix available EPSS 11.8% 7.5 HighJune 28, 2012
• springsource spring framework, oracle fusion middleware +1 more Improper Control of Generation of Code ('Code Injection') in Spring Framework CVE-2010-1622 Public exploitFix available EPSS 52.0% 6.0 MediumJune 21, 2010
• springsource application management suite, hyperic hq, tc server +2 more Multiple cross-site scripting (XSS) vulnerabilities in SpringSource tc Server 6.0.20.B and... CVE-2009-2907 Public exploit 4.3 MediumMarch 24, 2010
• springsource application management suite, hyperic hq, tc server +2 more Cross-site scripting (XSS) vulnerability in the Alerts list feature in the web interface in... CVE-2009-2898 Public exploit 3.5 LowOctober 13, 2009
• springsource application management suite, hyperic hq, tc server +2 more Multiple cross-site scripting (XSS) vulnerabilities in hq/web/common/GenericError.jsp in the... CVE-2009-2897 4.3 MediumOctober 13, 2009