Filter
Versions
5.3.0
13
5.0.0
10
5.2.0
9
3.2.1
8
3.2.2
8
3.2.3
8
3.2.4
6
3.2.7
6
3.0.7
5
3.2.5
5
3.2.6
5
3.2.8
5
6.0.0
5
3.0.6
4
3.1.1
4
3.1.2
4
3.1.3
4
3.1.4
4
3.2.0
4
3.2.10
4
3.2.11
4
3.2.12
4
3.2.13
4
3.2.9
4
4.0.0-milestone1
4
4.1.1
4
4.1.2
4
4.1.3
4
4.1.4
4
4.3.0
4
5.1.0
4
3.1.0
3
3.2.14
3
4.0.0-milestone2
3
4.0.1
3
4.0.2
3
4.0.3
3
4.0.4
3
4.1.5
3
4.1.6
3
4.2.1
3
3.0.4
2
3.0.5
2
3.2.15
2
3.2.16
2
3.2.17
2
4.0.0-rc1
2
4.0.5
2
4.0.6
2
4.0.7
2
4.0.8
2
4.0.9
2
4.1.7
2
4.2.0
2
4.2.2
2
4.2.3
2
4.2.4
2
4.2.5
2
4.2.6
2
4.2.7
2
4.2.8
2
5.2.21
2
5.3.19
2
3.0.0
1
3.0.1
1
3.0.2
1
3.0.3
1
3.1.0-rc1
1
3.1.0-rc2
1
3.2.0-rc1
1
3.2.0-rc2
1
3.2.0-rc2-a
1
3.2.18
1
4.0.0
1
4.0.0-rc2
1
4.1.0
1
4.1.8
1
4.1.9
1
4.2.9
1
4.3.1
1
4.3.2
1
4.3.3
1
4.3.4
1
5.0
1
5.0.5
1
5.2.17
1
5.2.18
1
5.2.20
1
5.2.22
1
5.3.10
1
5.3.13
1
5.3.18
1
5.3.25
1
6.0.15
1
6.0.6
1
6.1.0
1
6.1.2
1
Veritas NetBackup ApplianceSpring Framework JDK 9+ Remote Code Execution Vulnerability
First published (updated )
maven/org.springframework:spring-webPivota Spring Framework could allow a remote attacker to execute arbitrary code on the system, cause…
9.8
First published (updated )
Oracle Insurance Rules PaletteCode Injection, Input Validation
9.8
First published (updated )
Oracle Retail Integration BusCode Injection, Input Validation
9.8
First published (updated )
maven/cn.dev33:sa-token-coreAn issue in Dromara SaToken version 1.36.0 and before allows a remote attacker to escalate privilege…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/jenkinsA flaw was found in Spring Framework. In this vulnerability, a security bypass is possible due to th…
9.1
First published (updated )
Oracle Application Testing SuiteSpring Framework version 5.0.5 when used in combination with any versions of Spring Security contain…
8.8
First published (updated )
Oracle Retail Xstore Point of ServiceRFD Protection Bypass via jsessionid
8.7
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Oracle Insurance Policy Administration J2EERFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application
8
First published (updated )
Oracle Insurance Rules PaletteIn Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux app…
7.8
First published (updated )
maven/org.springframework:spring-coreSpring Framework server Web DoS Vulnerability
7.5
EPSS
0.05%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Oracle Insurance Rules PaletteDoS Attack via Range Requests
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/springframeworkA flaw was found in Spring Framework. Applications that handle file uploads are vulnerable to a deni…
7.5
First published (updated )
Oracle FLEXCUBE Private BankingPivotal Spring Framework is vulnerable to a denial of service. By sending a specially-crafted messag…
7.5
First published (updated )
Oracle FLEXCUBE Private BankingPivotal Spring Framework could allow a remote attacker to bypass security restrictions, caused by a …
7.5
First published (updated )
VMware Spring FrameworkBoth Spring Security 3.2.x, 4.0.x, 4.1.0 and the Spring Framework 3.2.x, 4.0.x, 4.1.x, 4.2.x rely on…
7.5
First published (updated )
VMware Spring FrameworkSpring Framework server Web Observations DoS Vulnerability
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
VMware Spring FrameworkAuthorization Bypass During JWT Issuer Validation with spring-security
7.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.