Known vulnerabilities in Spring Web Services

Vendor: Broadcom
Software CPE: cpe:2.3:a:broadcom:spring-ws:*:*:*:*:*:*:*:*
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Spring Web Services Spring Web Services is affected by 7 known vulnerabilities: 3 high, 2 medium, 2 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146191 - Information Exposure Through an Error Message
CVE-2026-40997
CWE-209 Medium
No
No
3.1.9, 4.0.19, 4.1.3.1, 4.1.4, 5.0.1.1, 5.0.2 28.08.2026 SB20260828159
#VU146190 - Server-Side Request Forgery (SSRF)
CVE-2026-40999
CWE-918 High
No
No
3.1.9, 4.0.19, 4.1.3.1, 4.1.4, 5.0.1.1, 5.0.2 28.08.2026 SB20260828159
SB20260917195
#VU146189 - Protection Mechanism Failure
CVE-2026-41000
CWE-693 Low
No
No
3.1.9, 4.0.19, 4.1.3.1, 4.1.4, 5.0.1.1, 5.0.2 28.08.2026 SB20260828159
#VU146188 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2026-40998
CWE-611 High
No
No
3.1.9, 4.0.19, 4.1.3.1, 4.1.4, 5.0.1.1, 5.0.2 28.08.2026 SB20260828159
#VU146187 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2026-40996
CWE-327 Medium
No
No
3.1.9, 4.0.19, 4.1.3.1, 4.1.4, 5.0.1.1, 5.0.2 28.08.2026 SB20260828159
#VU146186 - Improper Authentication
CVE-2026-40995
CWE-287 Low
No
No
3.1.9, 4.0.19, 4.1.3.1, 4.1.4, 5.0.1.1, 5.0.2 28.08.2026 SB20260828159
#VU146185 - Insecure Default Initialization of Resource
CVE-2026-40994
CWE-1188 High
No
No
3.1.9, 4.0.19, 4.1.3.1, 4.1.4, 5.0.1.1, 5.0.2 28.08.2026 SB20260828159