SW
Product
Spring Web Services
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 3Low 1
Watch
Add Spring Web Services to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-40995 | 5.4 | Jun 11 | X.509 authentication bypasses Spring Security account checks Affected: before 3.1.9; 4.0.0 before 4.0.19; 4.1.0 before 4.1.3.1; 5.0.0 before 5.0.1.1 |
| CVE-2026-40997 | 5.3 | Jun 11 | SOAP security faults leak Spring Security account state Affected: before 3.1.9; 4.0.0 before 4.0.19; 4.1.0 before 4.1.3.1; 5.0.0 before 5.0.1.1 |
| CVE-2026-40996 | 4.8 | Jun 11 | Inbound WS-Security allows RSA PKCS#1 v1.5 key transport by default Affected: before 3.1.9; 4.0.0 before 4.0.19; 4.1.0 before 4.1.3.1; 5.0.0 before 5.0.1.1 |
Showing 3