SF
Product
Spring Framework
10
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 2Low 0
Watch
Add Spring Framework to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-0225 | 8.8 | May 25 | When processing user provided XML documents, the Spring Framework 4.0.0 to 4.0.4, 3.0.0 to 3.2.8, and possibly earlier unsupported versions did not disable by default the… Affected: 3.0.0; 3.1.0; 3.2.0; 4.0.0 |
| CVE-2016-5007 | 7.5 | May 25 | Both Spring Security 3.2.x, 4.0.x, 4.1.0 and the Spring Framework 3.2.x, 4.0.x, 4.1.x, 4.2.x rely on URL pattern mappings for authorization and for mapping requests to controllers… Affected: 3.2.0; 4.0.0; 4.1.0; 4.2.0 |
| CVE-2016-9878 | 7.5 | Dec 29 | An issue was discovered in Pivotal Spring Framework before 3.2.18, 4.2.x before 4.2.9, and 4.3.x before 4.3.5 Affected: through 3.2.0; 4.2.0; 4.3.0 |
Showing 3