Known vulnerabilities in Spring Framework 5.0.5

Vendor: Broadcom
Version: 5.0.5
Software CPE: cpe:2.3:a:broadcom:pivotal_spring_framework:*:*:*:*:*:*:*:*
Total vulnerabilities: 10
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Spring Framework version 5.0.5 Spring Framework 5.0.5 is affected by 10 vulnerabilities: 1 critical, 4 medium, 5 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU109251 - Security Features
CVE-2025-22233
CWE-254 Low
No
No
5.3.43, 6.0.28, 6.1.20, 6.2.7 16.05.2025 SB2025051612
SB2025060628
SB2025062507
and 20 more
#VU96019 - Resource exhaustion
CVE-2024-38808
CWE-400 Medium
No
No
5.3.39 14.08.2024 SB2024081480
SB2024092018
SB2024100315
and 24 more
#VU75409 - Improper input validation
CVE-2023-20863
CWE-20 Medium
No
No
5.2.24, 5.3.27, 6.0.8 21.04.2023 SB2023042131
SB2023042132
SB2023050511
and 88 more
#VU62314 - Security Features
CVE-2022-22968
CWE-254 Medium
Public exploit available
No
5.2.21, 5.3.19 14.04.2022 SB2022041405
SB2022042903
SB2022060324
and 31 more
#VU61756 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-22965
CWE-94 Critical
Public exploit available
Exploited
5.2.20, 5.3.18 31.03.2022 SB2022033109
SB2022040109
SB2022040110
and 78 more
#VU15467 - Improper input validation
CVE-2018-15756
CWE-20 Low
No
No
4.3.20, 5.0.10, 5.1.1 22.10.2018 SB2018102305
SB2020012203
SB2020032701
and 28 more
#VU13500 - Exposure of sensitive information to an unauthorized actor
CVE-2018-11040
CWE-200 Low
No
No
4.3.18, 5.0.7 27.06.2018 SB2018062707
SB2023062703
SB2021022238
#VU13499 - Exposure of sensitive information to an unauthorized actor
CVE-2018-11039
CWE-200 Low
No
No
4.3.18, 5.0.7 26.06.2018 SB2018062707
SB2023062703
SB2021022238
#VU12651 - Missing Authorization
CVE-2018-1258
CWE-862 Low
No
No
- 15.05.2018 SB2018051507
SB2019011705
SB2019080913
and 11 more
#VU12650 - Improper input validation
CVE-2018-1257
CWE-20 Medium
No
No
- 15.05.2018 SB2018051507
SB2023062703
SB2021022238