Skip to contentVmware Spring Framework vulnerabilities
- vmware spring frameworkSpring Framework vulnerable to denial of service via specially crafted SpEL expressionCVE-2023-20861Fix available6.5 Medium
- vmware spring framework, netapp cloud secure agent, oncommand insight +1 more +3 moreAllocation of Resources Without Limits or Throttling in Spring FrameworkCVE-2022-22971Public exploitFix available6.5 Medium
- vmware spring framework, netapp active iq unified manager, brocade san navigator +3 more +5 moreDenial of service in Spring FrameworkCVE-2022-22970Public exploitFix available5.3 Medium
- vmware spring framework, netapp active iq unified manager, cloud secure agent +4 more +6 moreImproper handling of case sensitivity in Spring FrameworkCVE-2022-22968Public exploitFix available5.3 Medium
- vmware spring frameworkAllocation of Resources Without Limits or Throttling in Spring FrameworkCVE-2022-22950Fix availableEPSS 36.9%6.5 Medium
- vmware spring framework, cisco cx cloud agent, oracle commerce platform +35 more +37 moreRemote Code Execution in Spring FrameworkCVE-2022-22965In KEVPublic exploitFix availableEPSS 99.6%9.8 Critical
- vmware spring framework, oracle communications cloud native core console, communications cloud native core service communication proxy +2 moreLog entry injection in Spring FrameworkCVE-2021-22060Fix available4.3 Medium
- vmware spring framework, netapp active iq unified manager, management services for element software and netapp hci +5 more +7 moreImproper Output Neutralization for Logs in Spring FrameworkCVE-2021-22096Fix available4.3 Medium
- vmware spring framework, netapp hci, management services for element software +29 more +31 moreImproper Privilege Management in Spring FrameworkCVE-2021-22118Fix available7.8 High
- spring by vmware framework, vmware spring framework, netapp oncommand insight +36 more +38 moreRFD Protection Bypass via jsessionidCVE-2020-5421Public exploitFix availableEPSS 11.6%8.7 High
- spring framework, vmware spring framework, oracle application testing suite +25 more +27 moreCSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFluxCVE-2020-5397Fix available5.3 Medium
- spring framework, vmware spring framework, netapp data availability services +31 more +33 moreRFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux ApplicationCVE-2020-5398Public exploitFix availableEPSS 88.3%8.0 High
- vmware spring frameworkPivotal Spring Framework contains unsafe Java deserialization methodsCVE-2016-1000027Public exploitFix availableEPSS 33.2%9.8 Critical
- spring security, vmware spring framework +1 moreAuthorization Bypass During JWT Issuer Validation with spring-securityCVE-2018-15801Fix available3.3 Low
- pivotal spring framework, debian linux, oracle agile product lifecycle management +37 more +39 moreDoS Attack via Range RequestsCVE-2018-15756Fix available7.5 High
- pivotal spring framework, debian linux, oracle agile product lifecycle management +25 more +27 moreModerate severity vulnerability that affects org.springframework:spring-coreCVE-2018-11040Fix available7.5 High
- pivotal spring framework, debian linux, oracle agile product lifecycle management +30 more +32 moreSpring Framework Cross Site Tracing (XST)CVE-2018-11039Fix available5.9 Medium
- pivotal spring framework, pivotal software spring security, netapp oncommand insight +39 more +41 moreSpring Framework when used in combination with any versions of Spring Security contains an authorization bypassCVE-2018-1258Fix available8.8 High
- pivotal spring framework, oracle agile product lifecycle management, application testing suite +27 more +29 moreDenial of Service in org.springframework:spring-coreCVE-2018-1257Fix available6.5 Medium
- spring by pivotal framework, vmware spring framework, oracle application testing suite +17 more +19 moreSpring Framework has Improperly Implemented Security Check for StandardCVE-2018-1275Fix availableEPSS 57.7%9.8 Critical
- spring by pivotal framework, vmware spring framework, oracle application testing suite +23 more +25 morePossible privilege escalation in org.springframework:spring-coreCVE-2018-1272Fix available7.5 High
- spring by pivotal framework, vmware spring framework, oracle application testing suite +26 more +28 morePath Traversal in org.springframework:spring-coreCVE-2018-1271Fix availableEPSS 30.3%5.9 Medium
- spring by pivotal framework, vmware spring framework, debian linux +26 more +28 moreSpring Framework allows applications to expose STOMP over WebSocket endpointsCVE-2018-1270Public exploitFix availableEPSS 77.6%9.8 Critical
- vmware spring framework, spring security, dell emc spring by pivotal +3 more +5 moreImproper Input Validation in org.springframework.security:spring-security-core, org.springframework.security:spring-security-core , and org.springframework:spring-coreCVE-2018-1199Fix available5.3 Medium
- pivotal spring framework, spring security, spring security +2 moreSpring Security and Spring Framework may not recognize certain paths that should be protectedCVE-2016-5007Fix available7.5 High
- pivotal software spring frameworkPivotal Spring Framework Paths provided to the ResourceServlet were not properly sanitizedCVE-2016-9878Fix available7.5 High
- vmware spring framework, debian linux +1 moreFiles or Directories Accessible to External Parties in org.springframework:spring-coreCVE-2015-5211Fix available9.6 Critical
- pivotal software spring framework, fedoraproject fedora +1 morePivotal Spring Framework DoS Attack with XML InputCVE-2015-3192Fix available5.5 Medium
- pivotal spring frameworkImproper Restriction of XML External Entity Reference in Spring FrameworkCVE-2014-0225Fix available8.8 High
- pivotal software spring frameworkModerate severity vulnerability that affects org.springframework:spring-coreCVE-2015-0201Fix available5.0 Medium
- pivotal software spring frameworkImproper Limitation of a Pathname to a Restricted Directory in Spring FrameworkCVE-2014-3625Public exploitFix available5.0 Medium
- springsource spring frameworkCross-Site Request Forgery in Spring FrameworkCVE-2014-0054Fix availableEPSS 91.4%6.8 Medium
- pivotal software spring frameworkCross-Site Request Forgery in Spring FrameworkCVE-2013-6429Fix availableEPSS 90.6%6.8 Medium
- springsource spring frameworkMissing XML Validation in Spring FrameworkCVE-2013-7315Fix available6.8 Medium
- springsource spring frameworkCross-Site Request Forgery in Spring FrameworkCVE-2013-4152Fix availableEPSS 25.6%6.8 Medium
- vmware spring framework, spring security +1 moreSpring Framework and Spring Security vulnerable to Deserialization of Untrusted DataCVE-2011-2894Public exploitFix available6.8 Medium