Login Request a demo
SP
Product
Springblade
by Bladex · last CVE Jan 26, 2026
9
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 7High 1Medium 1Low 0
Severity
All severities9Critical7High1Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Springblade to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-70982
9.9
0%
Jan 26
Incorrect access control in the importUser function of SpringBlade v4.5.0 allows attackers with low-level privileges to arbitrarily import sensitive user data
Affected: 4.5.0
CVE-2025-70983
9.9
0%
Jan 23
Incorrect access control in the authRoutes function of SpringBlade v4.5.0 allows attackers with low-level privileges to escalate privileges
Affected: 4.5.0
CVE-2024-8023
9.8
1%
Aug 20
chillzhuang SpringBlade list sql injection
Affected: through 4.1.0
CVE-2023-47458
9.8
1%
Jan 2
An issue in SpringBlade v.3.7.0 and before allows a remote attacker to escalate privileges via the lack of permissions control framework
Affected: through 3.7.0
CVE-2023-40787
9.8
18%
Aug 29
In SpringBlade V3.6.0 when executing SQL query, the parameters submitted by the user are not wrapped in quotation marks, which leads to SQL injection
Affected: 3.6.0
CVE-2022-27360
9.8
2%
May 5
SpringBlade v3.2.0 and below was discovered to contain a SQL injection vulnerability via the component customSqlSegment
Affected: 3.2.0
CVE-2020-16165
9.8
1%
Jul 30
The DAO/DTO implementation in SpringBlade through 2.7.1 allows SQL Injection in an ORDER BY clause
Affected: through 2.7.1
CVE-2024-33332
7.5
1%
Apr 30
An issue discovered in SpringBlade 3.7.1 allows attackers to obtain sensitive information via crafted GET request to api/blade-system/tenant
Affected: 3.7.1
CVE-2023-40788
5.3
1%
Sep 18
SpringBlade <=V3.6.0 is vulnerable to Incorrect Access Control due to incorrect configuration in the default gateway resulting in unauthorized access to error logs
Affected: through 3.6.0
Showing 9