Known vulnerabilities in Spring Framework 4.3.13

Vendor: Broadcom
Version: 4.3.13
Software CPE: cpe:2.3:a:broadcom:pivotal_spring_framework:*:*:*:*:*:*:*:*
Total vulnerabilities: 9
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Spring Framework version 4.3.13 Spring Framework 4.3.13 is affected by 9 vulnerabilities: 2 high, 2 medium, 5 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75409 - Improper input validation
CVE-2023-20863
CWE-20 Medium
No
No
5.2.24, 5.3.27, 6.0.8 21.04.2023 SB2023042131
SB2023042132
SB2023050511
and 88 more
#VU15467 - Improper input validation
CVE-2018-15756
CWE-20 Low
No
No
4.3.20, 5.0.10, 5.1.1 22.10.2018 SB2018102305
SB2020012203
SB2020032701
and 28 more
#VU13500 - Exposure of sensitive information to an unauthorized actor
CVE-2018-11040
CWE-200 Low
No
No
4.3.18, 5.0.7 27.06.2018 SB2018062707
SB2023062703
SB2021022238
#VU13499 - Exposure of sensitive information to an unauthorized actor
CVE-2018-11039
CWE-200 Low
No
No
4.3.18, 5.0.7 26.06.2018 SB2018062707
SB2023062703
SB2021022238
#VU12650 - Improper input validation
CVE-2018-1257
CWE-20 Medium
No
No
- 15.05.2018 SB2018051507
SB2023062703
SB2021022238
#VU12131 - Improper input validation
CVE-2018-1275
CWE-20 High
No
No
- 24.04.2018 SB2018042419
SB2018101614
SB2018101615
and 5 more
#VU11753 - Improper Privilege Management
CVE-2018-1272
CWE-269 Low
No
No
- 11.04.2018 SB2018040804
SB2023062703
SB2023102710
and 5 more
#VU11752 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-1271
CWE-22 Low
No
No
- 11.04.2018 SB2018040804
SB2023062703
SB2023102710
and 2 more
#VU11616 - Improper input validation
CVE-2018-1270
CWE-20 High
No
No
- 08.04.2018 SB2018040804
SB2023062703
SB2021022238