Known vulnerabilities in Spring Framework - page 2

Vendor: Broadcom
Software CPE: cpe:2.3:a:broadcom:pivotal_spring_framework:*:*:*:*:*:*:*:*
Total vulnerabilities: 42
Public exploits: 4
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Spring Framework Spring Framework is affected by 42 known vulnerabilities: 1 critical, 2 high, 26 medium, 13 low Critical High Medium Low

Vulnerabilities (42)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83582 - Improper input validation
CVE-2023-34053
CWE-20 Medium
No
No
6.0.14 29.11.2023 SB2023112966
SB2023112967
SB2024011661
and 13 more
#VU75562 - Improper input validation
CVE-2023-20861
CWE-20 Medium
No
No
5.2.23, 5.3.26, 6.0.7 27.04.2023 SB2023042742
SB2023042746
SB2023042832
and 61 more
#VU75561 - Improper input validation
CVE-2023-20860
CWE-20 Medium
No
No
5.3.26, 6.0.7 27.04.2023 SB2023042742
SB2023042746
SB2023050518
and 34 more
#VU75409 - Improper input validation
CVE-2023-20863
CWE-20 Medium
No
No
5.2.24, 5.3.27, 6.0.8 21.04.2023 SB2023042131
SB2023042132
SB2023050511
and 88 more
#VU63085 - Improper input validation
CVE-2022-22971
CWE-20 Medium
Available
No
5.2.22, 5.3.20 12.05.2022 SB2022051201
SB2022060620
SB2022062223
and 52 more
#VU63084 - Improper input validation
CVE-2022-22970
CWE-20 Medium
No
No
5.2.22, 5.3.20 12.05.2022 SB2022051201
SB2022060620
SB2022062223
and 23 more
#VU62314 - Security Features
CVE-2022-22968
CWE-254 Medium
Available
No
5.2.21, 5.3.19 14.04.2022 SB2022041405
SB2022042903
SB2022060324
and 31 more
#VU61760 - Incorrect Regular Expression
CVE-2022-22950
CWE-185 Medium
No
No
5.3.17 31.03.2022 SB2022033110
SB2022060308
SB2022060324
and 25 more
#VU61756 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-22965
CWE-94 Critical
Available
Exploited
5.2.20, 5.3.18 31.03.2022 SB2022033109
SB2022040109
SB2022040110
and 78 more
#VU61720 - Improper input validation
CVE-2021-22096
CWE-20 Medium
No
No
5.2.18, 5.3.12 29.03.2022 SB2021102810
SB2022032929
SB2022032930
and 15 more
#VU53672 - Permissions, Privileges, and Access Controls
CVE-2021-22118
CWE-264 Low
No
No
5.2.15, 5.3.7 31.05.2021 SB2021053107
SB2021072775
SB2021072776
and 21 more
#VU24391 - Cross-Site Request Forgery (CSRF)
CVE-2020-5397
CWE-352 Low
No
No
5.2.3 20.01.2020 SB2020012004
#VU15467 - Improper input validation
CVE-2018-15756
CWE-20 Low
No
No
4.3.20, 5.0.10, 5.1.1 22.10.2018 SB2018102305
SB2020012203
SB2020032701
and 28 more
#VU13500 - Exposure of sensitive information to an unauthorized actor
CVE-2018-11040
CWE-200 Low
No
No
4.3.18, 5.0.7 27.06.2018 SB2018062707
SB2023062703
SB2021022238
#VU13499 - Exposure of sensitive information to an unauthorized actor
CVE-2018-11039
CWE-200 Low
No
No
4.3.18, 5.0.7 26.06.2018 SB2018062707
SB2023062703
SB2021022238
#VU12651 - Missing Authorization
CVE-2018-1258
CWE-862 Low
No
No
- 15.05.2018 SB2018051507
SB2019011705
SB2019080913
and 11 more
#VU12650 - Improper input validation
CVE-2018-1257
CWE-20 Medium
No
No
- 15.05.2018 SB2018051507
SB2023062703
SB2021022238
#VU12131 - Improper input validation
CVE-2018-1275
CWE-20 High
No
No
- 24.04.2018 SB2018042419
SB2018101614
SB2018101615
and 5 more
#VU11753 - Improper Privilege Management
CVE-2018-1272
CWE-269 Low
No
No
- 11.04.2018 SB2018040804
SB2023062703
SB2023102710
and 5 more
#VU11616 - Improper input validation
CVE-2018-1270
CWE-20 High
No
No
- 08.04.2018 SB2018040804
SB2023062703
SB2021022238


Showing elements 21 - 40 out of 42