Known vulnerabilities in Spring LDAP

Vendor: Broadcom
Software: Spring LDAP
Software CPE: cpe:2.3:a:broadcom:ldap:*:*:*:*:*:*:*:*
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Spring LDAP Spring LDAP is affected by 2 known vulnerabilities: 2 medium Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146175 - Improper Authentication
CVE-2026-41720
CWE-287 Medium
No
No
2.4.5, 3.2.18, 3.3.8, 4.0.4 28.08.2026 SB20260828156
#VU100679 - Exposure of sensitive information to an unauthorized actor
CVE-2024-38829
CWE-200 Medium
No
No
2.4.4, 3.0.10, 3.1.8, 3.2.8 20.11.2024 SB2024112004
SB2025071423
SB2025090314