Known vulnerabilities in Spring Framework 6.1.17

Vendor: Broadcom
Version: 6.1.17
Software CPE: cpe:2.3:a:broadcom:pivotal_spring_framework:*:*:*:*:*:*:*:*
Total vulnerabilities: 10
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Spring Framework version 6.1.17 Spring Framework 6.1.17 is affected by 10 vulnerabilities: 6 medium, 4 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128385 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-22735
CWE-74 Low
No
No
5.3.47, 6.1.26, 6.2.17, 7.0.6 28.04.2026 SB20260428206
SB2026043058
SB2026052217
and 4 more
#VU128372 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-22737
CWE-22 Medium
No
No
5.3.47, 6.1.26, 6.2.17, 7.0.6 28.04.2026 SB20260428206
SB2026043058
SB2026052218
and 4 more
#VU126710 - Resource exhaustion
CVE-2026-22745
CWE-400 Medium
No
No
5.3.48, 6.1.27, 6.2.18, 7.0.7 21.04.2026 SB2026042162
SB2026052514
SB2026060904
and 2 more
#VU126709 - Acceptance of Extraneous Untrusted Data With Trusted Data
CVE-2026-22741
CWE-349 Low
No
No
5.3.48, 6.1.27, 6.2.18, 7.0.7 21.04.2026 SB2026042162
SB2026052514
SB20260528259
and 2 more
#VU126708 - Improper Resource Shutdown or Release
CVE-2026-22740
CWE-404 Low
No
No
5.3.48, 6.1.27, 6.2.18, 7.0.7 21.04.2026 SB2026042162
SB2026052514
SB2026060812
#VU117323 - Cross-Site Request Forgery (CSRF)
CVE-2025-41254
CWE-352 Medium
No
No
5.3.46, 6.1.24, 6.2.12 16.10.2025 SB2025101638
SB2025121921
SB2026012235
and 3 more
#VU115573 - Protection Mechanism Failure
CVE-2025-41249
CWE-693 Medium
No
No
5.3.45, 6.1.23, 6.2.11 16.09.2025 SB20250916314
SB2025100741
SB20251008143
and 62 more
#VU114067 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-41242
CWE-22 Medium
No
No
5.3.44, 6.1.22, 6.2.10 14.08.2025 SB2025081411
SB2025100743
SB2025110336
and 18 more
#VU111210 - Improper input validation
CVE-2025-41234
CWE-20 Medium
No
No
6.0.29, 6.1.21, 6.2.8 17.06.2025 SB2025061720
SB2025070709
SB2025071012
and 13 more
#VU109251 - Security Features
CVE-2025-22233
CWE-254 Low
No
No
5.3.43, 6.0.28, 6.1.20, 6.2.7 16.05.2025 SB2025051612
SB2025060628
SB2025062507
and 20 more