SI
Product
Spring Integration
17
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 3Medium 10Low 1
Watch
Add Spring Integration to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-47864 | 9.8 | Aug 27 | Unsafe Java deserialization in SerializingHttpMessageConverter — remote code execution Affected: before 5.5.22; 6.4.0 before 6.4.13; 6.5.0 before 6.5.11; 7.0.0 before 7.0.5.1; 7.1.0 before 7.1.0.1 |
| CVE-2020-5413 | 9.8 | Jul 31 | Spring Integration framework provides Kryo Codec implementations as an alternative for Java (de)serialization Affected: 4.3.0 through 4.3.22; 5.1.0 through 5.1.11; 5.2.0 through 5.2.7; 5.3.0 through 5.3.1 |
| CVE-2019-3772 | 9.8 | Jan 18 | Spring Integration XML External Entity Injection (XXE) Affected: through 4.3.18; 5.0.0 through 5.0.10; 5.1.0 through 5.1.1 |
Showing 3