Known vulnerabilities in Spring Framework 5.2.5
Vendor:
Broadcom
Software:
Spring Framework
Version:
5.2.5
Software CPE:
cpe:2.3:a:broadcom:pivotal_spring_framework:*:*:*:*:*:*:*:*
Website:
https://www.broadcom.com/
Total vulnerabilities:
10
Public exploits:
3
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
7.1.0-M1
7.0.9
7.0.8
6.2.19
5.3.48
6.1.27
7.0.7
6.2.18
5.3.47
6.1.26
6.1.25
7.0.6
6.2.17
7.0.5
7.0.4
6.2.16
7.0.3
7.0.2
6.2.15
7.0.1
6.2.14
7.0.0
6.2.13
7.0.0-RC3
7.0.0-RC2
7.0.0-RC1
6.2.12
6.1.24
5.3.46
5.3.45
6.1.23
7.0.0-M9
6.2.11
7.0.0-M8
5.3.44
6.1.22
6.2.10
7.0.0-M7
6.2.9
6.0.29
7.0.0-M6
6.2.8
6.1.21
5.3.43
6.0.28
6.0.27
6.0.26
7.0.0-M5
6.2.7
6.1.20
7.0.0-M4
6.2.6
6.1.19
6.2.5
7.0.0-M3
6.2.4
6.1.18
7.0.0-M2
6.2.3
6.1.17
7.0.0-M1
6.2.2
6.2.1
6.1.16
5.3.42
6.2.0
6.1.15
6.2.0-RC3
6.0.25
5.3.41
6.2.0-RC2
6.1.14
6.0.24
5.3.40
6.2.0-RC1
6.1.13
6.2.0-M7
6.1.12
6.0.23
5.3.39
5.3.38
6.2.0-M6
6.2.0-M5
6.1.11
6.1.10
6.2.0-M4
6.1.9
6.0.22
5.3.37
6.2.0-M3
6.1.8
6.0.21
5.3.36
6.2.0-M2
6.1.7
6.0.20
5.3.35
2.5.7.SR023
2.5.6.SEC03
-
6.2.0-M1
6.1.6
6.0.19
5.3.34
6.1.5
6.0.18
5.3.33
6.1.4
6.0.17
5.3.32
6.1.3
6.0.16
6.1.2
6.0.15
6.1.1
6.1.0
6.0.14
5.3.31
6.1.0-RC2
6.1.0-RC1
6.0.13
6.1.0-M5
6.0.12
5.3.30
6.1.0-M4
6.1.0-M3
6.1.0-M2
6.0.11
5.3.29
5.2.25
6.1.0-M1
6.0.10
5.3.28
6.0.9
6.0.8
5.3.27
5.2.24
5.2.23
6.0.7
5.3.26
6.0.6
6.0.5
6.0.4
5.3.25
6.0.3
6.0.2
6.0.1
6.0.0
5.3.24
6.0.0-RC4
6.0.0-RC3
6.0.0-RC2
6.0.0-RC1
5.3.23
6.0.0-M6
6.0.0-M5
5.3.22
5.3.21
6.0.0-M4
5.3.20
5.2.22
5.2.21
5.3.19
5.2.20
5.3.18
6.0.0-M3
6.0.0-M2
6.0.0-M1
5.3.17
5.3.16
5.3.15
5.3.14
5.3.13
5.3.12
5.3.11
5.3.10
5.3.9
5.3.8
5.3.0-RC2
5.3.0-RC1
5.3.0-M2
5.3.0-M1
5.2.19
5.2.18
5.2.17
5.2.16
5.2.0-RC2
5.2.0-RC1
5.2.0-M3
5.2.0-M2
5.2.0-M1
5.1.20
5.1.19
5.1.18
5.1.17
5.1.16
5.1.15
5.1.14
5.1.0-RC3
5.1.0-RC2
5.1.0-RC1
5.0.20
5.0.19
5.0.18
5.0.17
5.0.0-RC4
5.0.0-RC3
5.0.0-RC2
5.0.0-RC1
5.0.0-M5
5.0.0-M4
5.0.0-M3
5.0.0-M2
5.0.0-M1
4.3.30
4.3.29
4.3.28
4.3.27
4.3.0-RC2
4.3.0-RC1
4.2.0-RC3
4.2.0-RC2
4.2.0-RC1
4.1.0-RC2
4.1.0-RC1
4.0.0-RC2
4.0.0-RC1
4.0.0-M3
4.0.0-M2
4.0.0-M1
3.2.0-RC2-A
3.2.0-RC2
3.2.0-RC1
3.2.0-M2
3.2.0-M1
3.1.0-RC2
3.1.0-RC1
3.1.0-M2
3.1.0-M1
3.0.1-A
3.0.0-RC3
3.0.0-RC2
3.0.0-RC1
3.0.0-M4
3.0.0-M3
3.0.0-M2
3.0.0-M1
5.2.15
5.2.14
5.2.13
5.2.12
5.2.11
5.2.10
5.2.9
5.2.8
5.2.7
5.2.6
5.2.5
5.2.4
5.3.7
5.3.6
5.3.5
5.3.4
5.3.3
5.3.2
5.3.1
5.3.0
5.2.3
5.2.2
5.2.1
5.2.0
5.1.13
5.1.12
5.1.11
5.1.10
5.1.9
5.1.8
5.1.7
5.1.6
5.1.5
5.1.4
5.1.3
5.1.2
5.0.16
5.0.15
5.0.14
5.0.13
5.0.12
5.0.11
4.3.26
4.3.25
4.3.24
4.3.23
4.3.22
4.3.21
4.3.19
4.1.9
4.1.8
4.1.7
4.1.6
4.1.3
4.1.2
4.1.1
4.0.9
4.0.8
4.0.7
4.0.6
4.0.5
4.0.4
4.0.3
4.0.2
4.0.1
4.0.0
3.2.18
3.2.17
3.2.16
3.2.15
3.2.14
3.2.13
3.2.12
3.2.11
3.2.10
3.2.9
3.2.8
3.2.7
3.2.6
3.2.5
3.2.4
3.2.3
3.2.2
3.2.1
3.2.0
3.1.4
3.1.3
3.1.2
3.1.1
3.1.0
3.0.7
3.0.6
3.0.5
3.0.4
3.0.3
3.0.2
3.0.1
3.0.0
5.1.1
4.3.20
5.0.10
4.2.18
4.2.17
4.2.16
4.2.15
4.2.14
4.2.13
4.2.12
4.2.11
4.2.10
4.2.9
4.2.8
4.2.7
4.2.6
4.2.5
4.2.4
4.2.3
4.2.2
4.2.1
4.2.19
5.1.0
5.0.9
5.0.8
5.0.7
4.3.18
4.3.17
5.0.6
4.3.16
4.3.15
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
5.0.0
4.3.14
4.3.13
4.3.12
4.3.11
4.3.10
4.3.9
4.3.8
4.3.7
4.3.6
4.3.5
4.3.4
4.3.3
4.3.2
4.3.1
4.3.0
4.1.5
4.1.4
4.4
4.2
4.1
Vulnerabilities (10)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU109251 - Security Features CVE-2025-22233 |
CWE-254 | Low | 5.3.43, 6.0.28, 6.1.20, 6.2.7 | 16.05.2025 |
SB2025051612 SB2025060628 SB2025062507 and 20 more |
||
| #VU96019 - Resource exhaustion CVE-2024-38808 |
CWE-400 | Medium | 5.3.39 | 14.08.2024 |
SB2024081480 SB2024092018 SB2024100315 and 24 more |
||
| #VU75562 - Improper input validation CVE-2023-20861 |
CWE-20 | Medium | 5.2.23, 5.3.26, 6.0.7 | 27.04.2023 |
SB2023042742 SB2023042746 SB2023042832 and 61 more |
||
| #VU75409 - Improper input validation CVE-2023-20863 |
CWE-20 | Medium | 5.2.24, 5.3.27, 6.0.8 | 21.04.2023 |
SB2023042131 SB2023042132 SB2023050511 and 88 more |
||
| #VU63085 - Improper input validation CVE-2022-22971 |
CWE-20 | Medium | 5.2.22, 5.3.20 | 12.05.2022 |
SB2022051201 SB2022060620 SB2022062223 and 52 more |
||
| #VU63084 - Improper input validation CVE-2022-22970 |
CWE-20 | Medium | 5.2.22, 5.3.20 | 12.05.2022 |
SB2022051201 SB2022060620 SB2022062223 and 23 more |
||
| #VU62314 - Security Features CVE-2022-22968 |
CWE-254 | Medium | 5.2.21, 5.3.19 | 14.04.2022 |
SB2022041405 SB2022042903 SB2022060324 and 31 more |
||
| #VU61756 - Improper Control of Generation of Code ('Code Injection') CVE-2022-22965 |
CWE-94 | Critical | 5.2.20, 5.3.18 | 31.03.2022 |
SB2022033109 SB2022040109 SB2022040110 and 78 more |
||
| #VU61720 - Improper input validation CVE-2021-22096 |
CWE-20 | Medium | 5.2.18, 5.3.12 | 29.03.2022 |
SB2021102810 SB2022032929 SB2022032930 and 15 more |
||
| #VU53672 - Permissions, Privileges, and Access Controls CVE-2021-22118 |
CWE-264 | Low | 5.2.15, 5.3.7 | 31.05.2021 |
SB2021053107 SB2021072775 SB2021072776 and 21 more |