Known vulnerabilities in Spring Framework 5.3.3 - page 2

Vendor: Broadcom
Version: 5.3.3
Software CPE: cpe:2.3:a:broadcom:pivotal_spring_framework:*:*:*:*:*:*:*:*
Total vulnerabilities: 26
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Spring Framework version 5.3.3 Spring Framework 5.3.3 is affected by 26 vulnerabilities: 1 critical, 20 medium, 5 low Critical High Medium Low

Vulnerabilities (26)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU63084 - Improper input validation
CVE-2022-22970
CWE-20 Medium
No
No
5.2.22, 5.3.20 12.05.2022 SB2022051201
SB2022060620
SB2022062223
and 23 more
#VU62314 - Security Features
CVE-2022-22968
CWE-254 Medium
Public exploit available
No
5.2.21, 5.3.19 14.04.2022 SB2022041405
SB2022042903
SB2022060324
and 31 more
#VU61760 - Incorrect Regular Expression
CVE-2022-22950
CWE-185 Medium
No
No
5.3.17 31.03.2022 SB2022033110
SB2022060308
SB2022060324
and 25 more
#VU61756 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-22965
CWE-94 Critical
Public exploit available
Exploited
5.2.20, 5.3.18 31.03.2022 SB2022033109
SB2022040109
SB2022040110
and 78 more
#VU61720 - Improper input validation
CVE-2021-22096
CWE-20 Medium
No
No
5.2.18, 5.3.12 29.03.2022 SB2021102810
SB2022032929
SB2022032930
and 15 more
#VU53672 - Permissions, Privileges, and Access Controls
CVE-2021-22118
CWE-264 Low
No
No
5.2.15, 5.3.7 31.05.2021 SB2021053107
SB2021072775
SB2021072776
and 21 more


Showing elements 21 - 40 out of 26