SS
Product
Spring Security Oauth
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 2Low 0
Watch
Add Spring Security Oauth to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-1260 | 9.8 | May 11 | Spring Security OAuth, versions 2.3 prior to 2.3.3, 2.2 prior to 2.2.2, 2.1 prior to 2.1.2, 2.0 prior to 2.0.15 and older unsupported versions contains a remote code execution… Affected: through 2.0.14; 2.1 through 2.1.1; 2.2 through 2.2.1; 2.3 through 2.3.2 |
| CVE-2018-15758 | 8.1 | Oct 18 | Spring Security OAuth, versions 2.3 prior to 2.3.4, and 2.2 prior to 2.2.3, and 2.1 prior to 2.1.3, and 2.0 prior to 2.0.16, and older unsupported versions could be susceptible to… Affected: through 1.0.5; 2.0.0 before 2.0.16; 2.1.0 before 2.1.3; 2.2.0 before 2.2.3; 2.3.0 before 2.3.4 |
| CVE-2019-3778 | 6.5 | Mar 7 | Open Redirect in spring-security-oauth2 Affected: 2.0.0 before 2.0.17; 2.1.0 before 2.1.4; 2.2.0 before 2.2.4; 2.3.0 before 2.3.5 |
| CVE-2019-11269 | 5.4 | Jun 12 | Spring Security OAuth versions 2.3 prior to 2.3.6, 2.2 prior to 2.2.5, 2.1 prior to 2.1.5, and 2.0 prior to 2.0.18, as well as older unsupported versions could be susceptible to… Affected: 2.0.0 before 2.0.18; 2.1.0 before 2.1.5; 2.2.0 before 2.2.5; 2.3.0 before 2.3.6 |
Showing 4