SS
Product
Spring Security Oauth
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 2Low 0
Watch
Add Spring Security Oauth to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-3778 | 6.5 | Mar 7 | Open Redirect in spring-security-oauth2 Affected: 2.0.0 before 2.0.17; 2.1.0 before 2.1.4; 2.2.0 before 2.2.4; 2.3.0 before 2.3.5 |
| CVE-2019-11269 | 5.4 | Jun 12 | Spring Security OAuth versions 2.3 prior to 2.3.6, 2.2 prior to 2.2.5, 2.1 prior to 2.1.5, and 2.0 prior to 2.0.18, as well as older unsupported versions could be susceptible to… Affected: 2.0.0 before 2.0.18; 2.1.0 before 2.1.5; 2.2.0 before 2.2.5; 2.3.0 before 2.3.6 |
Showing 2