Filters
Versions
5.3.0
13
5.0.0
10
5.2.0
9
3.2.1
8
3.2.2
8
3.2.3
8
3.2.4
6
3.2.7
6
3.0.7
5
3.2.5
5
3.2.6
5
3.2.8
5
6.0.0
5
3.0.6
4
3.1.1
4
3.1.2
4
3.1.3
4
3.1.4
4
3.2.0
4
3.2.10
4
3.2.11
4
3.2.12
4
3.2.13
4
3.2.9
4
4.0.0-milestone1
4
4.1.1
4
4.1.2
4
4.1.3
4
4.1.4
4
4.3.0
4
5.1.0
4
3.1.0
3
3.2.14
3
4.0.0-milestone2
3
4.0.1
3
4.0.2
3
4.0.3
3
4.0.4
3
4.1.5
3
4.1.6
3
4.2.1
3
3.0.4
2
3.0.5
2
3.2.15
2
3.2.16
2
3.2.17
2
4.0.0-rc1
2
4.0.5
2
4.0.6
2
4.0.7
2
4.0.8
2
4.0.9
2
4.1.7
2
4.2.0
2
4.2.2
2
4.2.3
2
4.2.4
2
4.2.5
2
4.2.6
2
4.2.7
2
4.2.8
2
5.2.21
2
5.3.19
2
3.0.0
1
3.0.1
1
3.0.2
1
3.0.3
1
3.1.0-rc1
1
3.1.0-rc2
1
3.2.0-rc1
1
3.2.0-rc2
1
3.2.0-rc2-a
1
3.2.18
1
4.0.0
1
4.0.0-rc2
1
4.1.0
1
4.1.8
1
4.1.9
1
4.2.9
1
4.3.1
1
4.3.2
1
4.3.3
1
4.3.4
1
5.0
1
5.0.5
1
5.2.17
1
5.2.18
1
5.2.20
1
5.2.22
1
5.3.10
1
5.3.13
1
5.3.18
1
5.3.25
1
6.0.15
1
6.0.6
1
6.1.0
1
6.1.2
1
VMware Spring FrameworkSpring Framework DataBinder Case Sensitive Match Exception
5.3
First published (updated )
maven/org.springframework:spring-coreSpring Framework server Web DoS Vulnerability
7.5
EPSS
0.05%
First published (updated )
VMware Spring FrameworkSpring Framework server Web Observations DoS Vulnerability
7.5
First published (updated )
maven/cn.dev33:sa-token-coreAn issue in Dromara SaToken version 1.36.0 and before allows a remote attacker to escalate privilege…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
VMware Spring FrameworkA flaw found was found in Spring Framework. This flaw allows a malicious user to use a specially cra…
6.5
First published (updated )
redhat/jenkinsA flaw was found in Spring Framework. In this vulnerability, a security bypass is possible due to th…
9.1
First published (updated )
redhat/springframeworkA flaw was found in Spring Framework. Applications that handle file uploads are vulnerable to a deni…
7.5
First published (updated )
redhat/springframeworkA flaw was found in Spring Framework Applications. Applications that use STOMP over the WebSocket en…
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Veritas NetBackup ApplianceSpring Framework JDK 9+ Remote Code Execution Vulnerability
First published (updated )
IBM QRadar SIEMIn Spring Framework versions 5.3.0 - 5.3.10, 5.2.0 - 5.2.17, and older unsupported versions, it is p…
5.3
First published (updated )
Oracle Insurance Rules PaletteIn Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux app…
7.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Oracle Retail Xstore Point of ServiceRFD Protection Bypass via jsessionid
8.7
First published (updated )
Oracle Insurance Policy Administration J2EECSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFlux
5.3
First published (updated )
Oracle Insurance Policy Administration J2EERFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application
8
First published (updated )
maven/org.springframework:spring-webPivota Spring Framework could allow a remote attacker to execute arbitrary code on the system, cause…
9.8
First published (updated )
VMware Spring FrameworkAuthorization Bypass During JWT Issuer Validation with spring-security
7.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Oracle Insurance Rules PaletteDoS Attack via Range Requests
7.5
First published (updated )
Oracle FLEXCUBE Private BankingPivotal Spring Framework could allow a remote attacker to bypass security restrictions, caused by a …
7.5
First published (updated )
Oracle Application Testing SuiteSpring Framework version 5.0.5 when used in combination with any versions of Spring Security contain…
8.8
First published (updated )
Oracle FLEXCUBE Private BankingPivotal Spring Framework is vulnerable to a denial of service. By sending a specially-crafted messag…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Oracle Insurance Rules PaletteCode Injection, Input Validation
9.8
First published (updated )
Oracle Retail Integration BusCode Injection, Input Validation
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
VMware Spring FrameworkBoth Spring Security 3.2.x, 4.0.x, 4.1.0 and the Spring Framework 3.2.x, 4.0.x, 4.1.x, 4.2.x rely on…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
VMware Spring FrameworkThe Java SockJS client in Pivotal Spring Framework 4.1.x before 4.1.5 generates predictable session …
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
maven/org.springframework.security:spring-security-coreSpring Framework 3.0.0 through 3.0.5, Spring Security 3.0.0 through 3.0.5 and 2.0.0 through 2.0.6, a…
6.8
First published (updated )