Known vulnerabilities in spring-boot 3.5.12
Vendor:
Broadcom
Software:
spring-boot
Version:
3.5.12
Software CPE:
cpe:2.3:a:broadcom:spring-boot:*:*:*:*:*:*:*:*
Website:
https://www.broadcom.com/
Total vulnerabilities:
8
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
7.7
Vulnerabilities by Severity
4.1.1
4.0.8
3.5.16
2.7.34
3.3.20
3.4.17
3.5.14.1
4.0.6.1
4.1.0
4.0.7
3.5.15
3.4.16
3.3.19
2.7.33
4.0.6
3.5.14
2.7.32
3.3.18
3.4.15
2.7.31
3.3.17
3.4.14
4.0.5
3.5.13
4.0.4
3.5.12
4.0.3
3.5.11
4.0.2
3.5.10
4.0.1
3.5.9
3.4.13
4.0.0
3.5.8
3.4.12
3.5.7
3.4.11
3.5.6
3.4.10
3.5.5
3.4.9
3.5.4
3.4.8
3.5.3
3.5.2
3.5.1
3.4.7
3.3.13
3.5.0
3.4.6
3.3.12
2.7.25
3.2.14
3.1.16
2.7.24
2.7.23
3.1.15
3.1.14
3.2.13
3.4.5
3.3.11
3.4.4
3.3.10
3.4.3
3.3.9
3.4.2
3.3.8
3.4.1
3.3.7
3.4.0
3.3.6
3.2.12
3.3.5
3.2.11
3.3.4
3.2.10
2.7.22
2.7.21
2.7.20
2.7.19
3.1.13
3.0.17
3.0.16
3.0.15
3.0.14
3.3.3
3.2.9
3.3.2
3.2.8
3.3.1
3.2.7
3.3.0
3.2.6
3.1.12
3.2.5
3.1.11
3.2.4
3.1.10
3.2.3
3.1.9
3.2.2
3.1.8
3.2.1
3.1.7
3.2.0
3.1.6
3.0.13
2.7.18
3.1.5
3.0.12
2.7.17
3.1.4
3.0.11
2.7.16
3.1.3
3.0.10
2.7.15
3.1.2
3.0.9
2.7.14
3.1.1
3.0.8
2.7.13
3.1.0
2.6.15
2.5.15
3.0.7
2.7.12
3.0.6
2.7.11
3.0.5
2.7.10
3.0.4
3.0.3
2.7.9
3.0.2
2.7.8
3.0.1
2.7.7
3.0.0
2.7.6
2.6.14
2.7.5
2.6.13
2.7.4
2.6.12
2.7.3
2.6.11
2.7.2
2.6.10
2.7.1
2.6.9
2.7.0
2.6.8
2.5.14
2.6.7
2.5.13
2.6.6
2.5.12
2.6.5
2.5.11
2.6.4
2.5.10
2.6.3
2.5.9
2.6.2
2.5.8
2.6.1
2.6.0
2.5.7
2.4.13
2.5.6
2.4.12
2.4.11
2.5.5
2.5.4
2.4.10
2.5.3
2.4.9
2.5.2
2.4.8
2.5.1
2.3.12
2.4.7
2.5.0
2.4.6
2.3.11
2.4.5
2.4.4
2.4.3
2.4.2
2.4.1
2.4.0
2.3.10
2.3.9
2.3.8
2.3.7
2.3.6
2.3.5
2.3.4
2.3.3
2.3.2
2.3.1
2.3.0
2.2.13
2.2.12
2.2.10
2.2.9
2.2.8
2.2.7
2.2.6
2.2.5
2.2.4
2.2.3
2.2.2
2.2.1
2.2.0
2.1.18
2.1.17
2.1.16
2.1.15
2.1.14
2.1.13
2.1.12
2.1.11
2.1.10
2.1.9
2.1.8
2.1.7
2.1.6
2.1.5
2.1.4
2.1.3
2.1.2
2.1.1
2.1.0
2.0.9
2.0.8
2.0.7
2.0.6
2.0.5
2.0.4
2.0.3
2.0.2
2.0.1
1.5.22
1.5.21
1.5.20
1.5.19
1.5.18
1.5.17
1.5.16
1.5.15
1.5.14
1.5.13
1.5.12
1.5.11
1.5.7
1.5.5
1.5.3
1.5.1
1.4.7
1.4.6
1.4.5
1.4.4
1.4.3
1.4.1
1.4.0
1.3.8
1.3.7
1.3.6
1.3.5
1.3.4
1.3.3
1.3.2
1.3.1
1.3.0
1.2.8
1.2.7
1.2.6
1.2.5
1.2.4
1.2.3
1.2.2
1.2.1
1.2.0
1.1.12
1.1.11
1.1.10
1.1.9
1.1.8
1.1.7
1.1.6
1.1.5
1.1.4
1.1.3
1.1.2
1.1.1
1.1.0
1.0.2
1.0.1
1.0.0
2.2.11
1.5.10
2.0.0.M7
2.0.0.M6
2.0.0.M5
2.0.0.M4
2.0.0.M3
2.0.0.M2
2.0.0.M1
2.0.0
1.5.9
1.5.6
1.5.4
1.5.8
1.5.2
1.4.2
1.5.0
Vulnerabilities (8)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU134322 - Improper Certificate Validation CVE-2026-40992 |
CWE-295 | Medium | 3.4.17, 3.5.14.1, 3.5.15, 4.0.6.1, 4.0.7 | 11.06.2026 |
SB2026061136 SB2026073114 |
||
| #VU134321 - Insecure Temporary File CVE-2026-41001 |
CWE-377 | Low | 2.7.34, 3.3.20, 3.4.17, 3.5.14.1, 3.5.15, 4.0.6.1, 4.0.7 | 11.06.2026 |
SB2026061136 SB2026073114 |
||
| #VU128235 - Improper Link Resolution Before File Access ('Link Following') CVE-2026-40977 |
CWE-59 | Low | 2.7.33, 3.3.19, 3.4.16, 3.5.14, 4.0.6 | 27.04.2026 |
SB20260427182 SB2026052513 SB2026052929 and 2 more |
||
| #VU128234 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) CVE-2026-40975 |
CWE-338 | Medium | 2.7.33, 3.3.19, 3.4.16, 3.5.14, 4.0.6 | 27.04.2026 |
SB20260427182 SB2026052513 SB2026052929 and 3 more |
||
| #VU128233 - Improper Validation of Certificate with Host Mismatch CVE-2026-40974 |
CWE-297 | Medium | 2.7.33, 3.3.19, 3.4.16, 3.5.14, 4.0.6 | 27.04.2026 |
SB20260427182 SB2026052513 SB20260528266 and 2 more |
||
| #VU128232 - Improper Access Control CVE-2026-40973 |
CWE-284 | Low | 2.7.33, 3.3.19, 3.4.16, 3.5.14, 4.0.6 | 27.04.2026 |
SB20260427182 SB2026052513 SB2026052929 and 2 more |
||
| #VU128231 - Information Exposure Through Timing Discrepancy CVE-2026-40972 |
CWE-208 | Medium | 2.7.33, 3.3.19, 3.4.16, 3.5.14, 4.0.6 | 27.04.2026 |
SB20260427182 SB2026052513 |
||
| #VU128230 - Improper Validation of Certificate with Host Mismatch CVE-2026-40971 |
CWE-297 | Medium | 3.5.14, 4.0.6 | 27.04.2026 |
SB20260427182 SB2026060827 SB2026062914 |