Known vulnerabilities in Spring Data JPA 1.9.2.

Vendor: Broadcom
Version: 1.9.2.
Software CPE: cpe:2.3:a:broadcom:spring_data_jpa:*:*:*:*:*:*:*:*
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Spring Data JPA version 1.9.2. Spring Data JPA 1.9.2. is affected by 2 vulnerabilities: 2 medium Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU26417 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2016-6652
CWE-89 Medium
No
No
1.9.6, 1.10.4 27.03.2020 SB2016100505
#VU18427 - Exposure of sensitive information to an unauthorized actor
CVE-2019-3797
CWE-200 Medium
No
No
1.11.20, 2.0.14, 2.1.6 10.05.2019 SB2019050614