SP
Vendor
Springsource
15
CVEs
0
On KEV
0
New 30D
Products
SF–
Spring Framework
Springsource
5 CVEs0 on KEV0 new
AM–
Application Management Suite
Springsource
3 CVEs0 on KEV0 new
HH–
Hyperic HQ
Springsource
3 CVEs0 on KEV0 new
TS–
TC Server
Springsource
3 CVEs0 on KEV0 new
GR–
Grails
Springsource
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2014-0054 | SF Spring Framework Springsource | – | Apr 17 | The Jaxb2RootElementHttpMessageConverter in Spring MVC in Spring Framework before 3.2.8 and 4.0.0 before 4.0.2 does not disable external entity resolution, which allows remote… |
| CVE-2013-7315 | SF Spring Framework Springsource | – | Jan 23 | The Spring MVC in Spring Framework before 3.2.4 and 4.0.0.M1 through 4.0.0.M2 does not disable external entity resolution for the StAX XMLInputFactory, which allows… |
| CVE-2013-4152 | SF Spring Framework Springsource | – | Jan 23 | The Spring OXM wrapper in Spring Framework before 3.2.4 and 4.0.0.M1, when using the JAXB marshaller, does not disable entity resolution, which allows context-dependent attackers… |
| CVE-2011-2730 | SF Spring Framework Springsource | – | Dec 5 | VMware SpringSource Spring Framework before 2.5.6.SEC03, 2.5.7.SR023, and 3.x before 3.0.6, when a container supports Expression Language (EL), evaluates EL expressions in tags… |
| CVE-2012-1833 | GR Grails Springsource | – | Sep 28 | VMware SpringSource Grails before 1.3.8, and 2.x before 2.0.2, does not properly restrict data binding, which might allow remote attackers to bypass intended access restrictions… |
| CVE-2010-1622 | SF Spring Framework Springsource | – | Jun 21 | SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote attackers to execute arbitrary code via an HTTP request… |
| CVE-2009-2907 | AM Application Management Suite Springsource | – | Mar 24 | Multiple cross-site scripting (XSS) vulnerabilities in SpringSource tc Server 6.0.20.B and earlier, Application Management Suite (AMS) before 2.0.0.SR4, Hyperic HQ Open Source… |
| CVE-2009-2898 | AM Application Management Suite Springsource | – | Oct 13 | Cross-site scripting (XSS) vulnerability in the Alerts list feature in the web interface in SpringSource Hyperic HQ 3.2.x before 3.2.6.1, 4.0.x before 4.0.3.1, 4.1.x before… |
| CVE-2009-2897 | AM Application Management Suite Springsource | – | Oct 13 | Multiple cross-site scripting (XSS) vulnerabilities in hq/web/common/GenericError.jsp in the generic exception handler in the web interface in SpringSource Hyperic HQ 3.2.x before… |