Skip to contentVmware Spring Framework vulnerabilities
- spring framework, vmware spring framework +1 moreCVE-2024-22233: Spring Framework server Web DoS VulnerabilityCVE-2024-22233Fix available7.5 High
- spring framework, vmware spring framework +1 moreSpring Framework server Web Observations DoS VulnerabilityCVE-2023-34053Fix available5.3 Medium
- vmware spring frameworkSpring Framework vulnerable to denial of serviceCVE-2023-20863Fix available6.5 Medium
- vmware spring frameworkSpring Framework is vulnerable to security bypass via mvcRequestMatcher pattern mismatchCVE-2023-20860Public exploitFix available7.5 High
- vmware spring frameworkSpring Framework vulnerable to denial of service via specially crafted SpEL expressionCVE-2023-20861Fix available6.5 Medium
- vmware spring framework, netapp cloud secure agent, oncommand insight +1 more +3 moreAllocation of Resources Without Limits or Throttling in Spring FrameworkCVE-2022-22971Public exploitFix available6.5 Medium
- vmware spring framework, netapp active iq unified manager, brocade san navigator +3 more +5 moreDenial of service in Spring FrameworkCVE-2022-22970Public exploitFix available5.3 Medium
- vmware spring framework, netapp active iq unified manager, cloud secure agent +4 more +6 moreImproper handling of case sensitivity in Spring FrameworkCVE-2022-22968Public exploitFix available5.3 Medium
- vmware spring frameworkAllocation of Resources Without Limits or Throttling in Spring FrameworkCVE-2022-22950Fix availableEPSS 36.9%6.5 Medium
- vmware spring framework, cisco cx cloud agent, oracle commerce platform +35 more +37 moreRemote Code Execution in Spring FrameworkCVE-2022-22965In KEVPublic exploitFix availableEPSS 99.6%9.8 Critical
- vmware spring framework, oracle communications cloud native core console, communications cloud native core service communication proxy +2 moreLog entry injection in Spring FrameworkCVE-2021-22060Fix available4.3 Medium
- vmware spring framework, netapp active iq unified manager, management services for element software and netapp hci +5 more +7 moreImproper Output Neutralization for Logs in Spring FrameworkCVE-2021-22096Fix available4.3 Medium
- vmware spring framework, netapp hci, management services for element software +29 more +31 moreImproper Privilege Management in Spring FrameworkCVE-2021-22118Fix available7.8 High
- spring by vmware framework, vmware spring framework, netapp oncommand insight +36 more +38 moreRFD Protection Bypass via jsessionidCVE-2020-5421Public exploitFix availableEPSS 11.6%8.7 High
- spring framework, vmware spring framework, oracle application testing suite +25 more +27 moreCSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFluxCVE-2020-5397Fix available5.3 Medium
- spring framework, vmware spring framework, netapp data availability services +31 more +33 moreRFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux ApplicationCVE-2020-5398Public exploitFix availableEPSS 88.3%8.0 High
- pivotal spring framework, debian linux, oracle agile product lifecycle management +37 more +39 moreDoS Attack via Range RequestsCVE-2018-15756Fix available7.5 High
- pivotal spring framework, debian linux, oracle agile product lifecycle management +25 more +27 moreModerate severity vulnerability that affects org.springframework:spring-coreCVE-2018-11040Fix available7.5 High
- pivotal spring framework, debian linux, oracle agile product lifecycle management +30 more +32 moreSpring Framework Cross Site Tracing (XST)CVE-2018-11039Fix available5.9 Medium
- pivotal spring framework, pivotal software spring security, netapp oncommand insight +39 more +41 moreSpring Framework when used in combination with any versions of Spring Security contains an authorization bypassCVE-2018-1258Fix available8.8 High
- pivotal spring framework, oracle agile product lifecycle management, application testing suite +27 more +29 moreDenial of Service in org.springframework:spring-coreCVE-2018-1257Fix available6.5 Medium
- broadcom spring data commons, pivotal software spring data rest, spring by pivotal framework +1 more +3 moreSpring Data Commons contain a property path parser vulnerability caused by unlimited resource allocationCVE-2018-1274Fix available7.5 High
- spring by pivotal framework, vmware spring framework, oracle application testing suite +17 more +19 moreSpring Framework has Improperly Implemented Security Check for StandardCVE-2018-1275Fix availableEPSS 57.7%9.8 Critical
- broadcom spring data commons, pivotal software spring data rest, apache ignite +3 more +5 moreSpring Data Commons remote code injection vulnerabilityCVE-2018-1273In KEVPublic exploitFix availableEPSS 97.0%9.8 Critical
- spring by pivotal framework, vmware spring framework, oracle application testing suite +23 more +25 morePossible privilege escalation in org.springframework:spring-coreCVE-2018-1272Fix available7.5 High
- spring by pivotal framework, vmware spring framework, oracle application testing suite +26 more +28 morePath Traversal in org.springframework:spring-coreCVE-2018-1271Fix availableEPSS 30.3%5.9 Medium
- spring by pivotal framework, vmware spring framework, debian linux +26 more +28 moreSpring Framework allows applications to expose STOMP over WebSocket endpointsCVE-2018-1270Public exploitFix availableEPSS 77.6%9.8 Critical
- pivotal spring framework, spring security, spring security +2 moreSpring Security and Spring Framework may not recognize certain paths that should be protectedCVE-2016-5007Fix available7.5 High
- pivotal spring frameworkImproper Restriction of XML External Entity Reference in Spring FrameworkCVE-2014-0225Fix available8.8 High