Springsource Spring Framework vulnerabilities

• springsource spring framework Cross-Site Request Forgery in Spring Framework CVE-2014-0054 Fix available EPSS 91.4% 6.8 MediumMarch 29, 2014
• springsource spring framework Missing XML Validation in Spring Framework CVE-2013-7315 Fix available 6.8 MediumJanuary 13, 2014
• springsource spring framework Cross-Site Request Forgery in Spring Framework CVE-2013-4152 Fix available EPSS 25.6% 6.8 MediumJanuary 13, 2014
• springsource spring framework Improper Neutralization of Directives in Dynamically Evaluated Code in Spring Framework CVE-2011-2730 Fix available EPSS 11.8% 7.5 HighJune 28, 2012
• springsource spring framework, oracle fusion middleware +1 more Improper Control of Generation of Code ('Code Injection') in Spring Framework CVE-2010-1622 Public exploitFix available EPSS 52.0% 6.0 MediumJune 21, 2010