Skip to contentVmware Spring vulnerabilities
- spring boot, vmware spring boot +1 moreSpring Boot server Web Observations DoS VulnerabilityCVE-2023-34055Fix available5.3 Medium
- spring framework, vmware spring framework +1 moreSpring Framework server Web Observations DoS VulnerabilityCVE-2023-34053Fix available5.3 Medium
- spring amqp, vmware spring advanced message queuing protocol +1 moreSpring AMQP Deserialization VulnerabilityCVE-2023-34050Public exploit5.0 Medium
- spring for graphql, vmware spring for graphql +1 moreExposure of data and identity to wrong session in Spring for GraphQLCVE-2023-34047Fix available3.1 Low
- spring for apache kafka, vmware spring for apache kafka +1 moreJava Deserialization vulnerability in Spring-Kafka When Improperly ConfiguredCVE-2023-34040Public exploitFix available5.3 Medium
- spring security, vmware spring security +1 moreAccess Control Bypass in Spring SecurityCVE-2023-34034Public exploitFix available9.1 Critical
- spring security, vmware spring security +1 moreSpring Security's authorization rules can be misconfigured when using multiple servletsCVE-2023-34035Public exploitFix available7.3 High
- spring hateoas, vmware spring hateoas +1 moreForwarded header exploit with Spring HATEOAS on WebFluxCVE-2023-34036Fix available5.3 Medium
- spring boot, vmware spring boot +1 moreSpring Boot Welcome Page Denial of ServiceCVE-2023-20883Fix available7.5 High
- spring boot, vmware spring boot +1 moreSpring Boot Security Bypass with Wildcard Pattern Matching on Cloud FoundryCVE-2023-20873Fix available9.8 Critical
- spring security, vmware spring security, netapp active iq unified manager +2 moreSpring Security logout not clearing security contextCVE-2023-20862Fix available6.3 Medium
- vmware spring sessionSpring Session session ID can be logged to the standard output streamCVE-2023-20866Fix available6.5 Medium
- vmware spring frameworkSpring Framework vulnerable to denial of serviceCVE-2023-20863Fix available6.5 Medium
- vmware spring frameworkSpring Framework is vulnerable to security bypass via mvcRequestMatcher pattern mismatchCVE-2023-20860Public exploitFix available7.5 High
- vmware spring frameworkSpring Framework vulnerable to denial of service via specially crafted SpEL expressionCVE-2023-20861Fix available6.5 Medium
- vmware spring vault, spring cloud config, spring cloud vault +2 moreSpring Vault vulnerable to insertion of sensitive information into a log fileCVE-2023-20859Fix available5.5 Medium
- apache shiro, vmware spring boot +1 moreApache Shiro before 1.11.0, when used with Spring Boot 2.6+, may allow authentication bypass through a specially crafted HTTP requestCVE-2023-22602Fix available7.5 High
- vmware bosh editor, cloudfoundry manifest yml support, concourse ci pipeline editor +2 more +4 moreSpring Tools 4 for Eclipse version 4.16.0 and below as well as VSCode extensions such as Spring...CVE-2022-31691Public exploit9.8 Critical
- vmware spring security, netapp active iq unified manager +1 moreSpring Security authorization rules can be bypassed via forward or include dispatcher typesCVE-2022-31692Public exploitFix available9.8 Critical
- spring security, vmware spring security, netapp active iq unified manager +2 morespring-security-oauth2-client vulnerable to Privilege EscalationCVE-2022-31690Fix available8.1 High
- vmware spring data restSpring Data REST can expose hidden entity attributesCVE-2022-31679Fix available3.7 Low
- vmware spring data mongodbSpEL Injection in Spring Data MongoDBCVE-2022-22980Public exploitFix availableEPSS 17.8%9.8 Critical
- vmware spring cloud functionDenial of Service in Spring Cloud FunctionCVE-2022-22979Fix available7.5 High
- spring security, vmware spring security, netapp active iq unified manager +1 more +3 moreInteger overflow in BCrypt class in Spring SecurityCVE-2022-22976Public exploitFix available5.3 Medium
- spring security, vmware spring security, netapp active iq unified manager +1 more +3 moreAuthorization bypass in Spring SecurityCVE-2022-22978Public exploitFix availableEPSS 12.4%9.8 Critical
- vmware spring framework, netapp cloud secure agent, oncommand insight +1 more +3 moreAllocation of Resources Without Limits or Throttling in Spring FrameworkCVE-2022-22971Public exploitFix available6.5 Medium
- vmware spring framework, netapp active iq unified manager, brocade san navigator +3 more +5 moreDenial of service in Spring FrameworkCVE-2022-22970Public exploitFix available5.3 Medium
- vmware spring framework, netapp active iq unified manager, cloud secure agent +4 more +6 moreImproper handling of case sensitivity in Spring FrameworkCVE-2022-22968Public exploitFix available5.3 Medium
- vmware spring frameworkAllocation of Resources Without Limits or Throttling in Spring FrameworkCVE-2022-22950Fix availableEPSS 36.9%6.5 Medium
- vmware spring cloud function, vmware tanzu spring cloud, oracle banking branch +26 more +28 moreSpring Cloud Function Code Injection with a specially crafted SpEL as a routing expressionCVE-2022-22963In KEVPublic exploitFix availableEPSS 99.9%9.8 Critical
- vmware spring framework, cisco cx cloud agent, oracle commerce platform +35 more +37 moreRemote Code Execution in Spring FrameworkCVE-2022-22965In KEVPublic exploitFix availableEPSS 99.6%9.8 Critical
- vmware spring bootTemporary Directory Hijacking to Local Privilege Escalation Vulnerability in org.springframework.boot:spring-bootCVE-2022-27772Public exploitFix available7.8 High
- vmware spring cloud gateway, oracle commerce guided search, communications cloud native core binding support function +3 more +5 moreIn spring cloud gateway versions prior to 3.1.1+ , applications that are configured to enable...CVE-2022-229465.5 Medium
- vmware spring cloud gateway, oracle commerce guided search, communications cloud native core binding support function +7 more +9 moreSpring Cloud Gateway vulnerable to Code Injection when Gateway Actuator endpoint enabled, exposed, unsecuredCVE-2022-22947In KEVPublic exploitFix availableEPSS 98.3%10.0 Critical
- vmware spring framework, oracle communications cloud native core console, communications cloud native core service communication proxy +2 moreLog entry injection in Spring FrameworkCVE-2021-22060Fix available4.3 Medium
- spring amqp, vmware spring advanced message queuing protocol +1 moreDeserialization of Untrusted Data in Spring AMQPCVE-2021-22095Fix available6.5 Medium
- spring by vmware cloud netflix, vmware spring cloud netflix +1 moreCode injection in spring-cloud-netflix-hystrix-dashboardCVE-2021-22053Public exploitFix availableEPSS 13.2%8.8 High
- vmware spring cloud gatewayRequest injection in Spring Cloud GatewayCVE-2021-22051Fix available6.5 Medium
- spring amqp, vmware spring advanced message queuing protocol +1 moreDeserialization of Untrusted Data in Spring AMQPCVE-2021-22097Fix available6.5 Medium
- vmware spring framework, netapp active iq unified manager, management services for element software and netapp hci +5 more +7 moreImproper Output Neutralization for Logs in Spring FrameworkCVE-2021-22096Fix available4.3 Medium
- vmware spring data restExposure of Resource to Wrong Sphere in Spring Data RESTCVE-2021-22047Fix available5.3 Medium
- vmware spring cloud openfeignExposure of Resource to Wrong Sphere in Spring Cloud OpenFeignCVE-2021-22044Fix available7.5 High
- spring security, vmware spring security, oracle communications cloud native core policy +2 moreResource Exhaustion in Spring SecurityCVE-2021-22119Public exploitFix available7.5 High
- vmware spring framework, netapp hci, management services for element software +29 more +31 moreImproper Privilege Management in Spring FrameworkCVE-2021-22118Fix available7.8 High
- netapp element plug-in for vcenter server, management services for element software and netapp hci, solidfire \& hci management node +1 more +3 moreElement Plug-in for vCenter Server incorporates SpringBoot Framework. SpringBoot Framework...CVE-2021-269879.8 Critical
- vmware spring integration zipPath Traversal in Spring-integration-zipCVE-2021-22114Fix available5.3 Medium
- pivotal software spring security, spring security, oracle communications element manager +5 more +7 morePrivilege escalation in spring securityCVE-2021-22112Fix available8.8 High
- vmware spring cloud netflix zuulIncorrect Authorization in Spring Cloud Netflix ZuulCVE-2021-22113Fix available5.3 Medium
- spring by vmware cloud task, vmware spring cloud task +1 morePossibility of SQL Injection in Spring Cloud Task Execution Sorting QueryCVE-2020-5428Fix available5.1 Medium
- spring cloud data flow, vmware spring cloud data flow +1 morePossibility of SQL Injection in Spring Cloud Data Flow Task Execution Sorting QueryCVE-2020-5427Fix available5.7 Medium
- Show moreLoading…