Known vulnerabilities in Spring Integration
Vendor:
Broadcom
Software:
Spring Integration
Software CPE:
cpe:2.3:a:broadcom:spring_integration:*:*:*:*:*:*:*:*
Website:
https://www.broadcom.com/
Total vulnerabilities:
18
Public exploits:
0
Known exploited (KEV):
0
Breakdown by Severity Chart
7.2.0-M2
7.2.0-M1
7.1.0-M3
7.1.0-M2
7.1.0-M1
7.0.0-M3
7.0.0-M2
7.0.0-M1
6.5.0-M3
6.5.0-M2
6.5.0-M1
6.4.0-M3
6.4.0-M2
6.4.0-M1
6.3.0-M2
6.3.0-M1
6.2.0-M3
6.2.0-M2
6.2.0-M1
6.1.0-M2
6.1.0-M1
6.0.0-M5
6.0.0-M4
6.0.0-M3
6.0.0-M2
6.0.0-M1
5.5.0-M3
5.5.0-M2
5.5.0-M1
5.4.0-M3
5.4.0-M2
5.4.0-M1
5.3.0-M4
5.3.0-M3
5.3.0-M2
5.3.0-M1
5.2.0-M4
5.2.0-M3
5.2.0-M2
5.2.0-M1
5.1.0-M2
5.1.0-M1
5.0.0-M7
5.0.0-M6
5.0.0-M5
5.0.0-M4
5.0.0-M3
5.0.0-M2
5.0.0-M1
4.3.0-M2
4.3.0-M1
4.2.0-M2
4.2.0-M1
4.1.0-M1
4.0.0-M4
4.0.0-M3
4.0.0-M2
4.0.0-M1
3.0.0-M3
3.0.0-M2
3.0.0-M1
2.2.0-M4
2.2.0-M3
2.2.0-M2
2.2.0-M1
2.1.0-M3
2.1.0-M2
2.1.0-M1
2.0.0-M7
2.0.0-M6
2.0.0-M5
2.0.0-M4
2.0.0-M3
2.0.0-M2
2.0.0-M1
1.0.0-M6
1.0.0-M5
1.0.0-M4
1.0.0-M3
1.0.0-M2
1.0.0-M1
5.5.22
6.4.13
6.5.11
7.0.5.1
7.1.0.1
5.5.21
6.3.15
6.4.12
6.5.8.1
7.0.4.1
7.1.1
7.0.6
6.5.10
7.1.0
7.0.5
7.0.4
7.0.3
7.0.2
7.0.1
7.0.0
6.5.9
6.5.8
6.5.7
6.5.6
6.5.5
6.5.4
6.5.3
6.5.2
6.5.1
6.5.0
6.4.10
6.4.9
6.4.8
6.4.7
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.3.11
6.3.10
6.3.9
6.3.8
6.3.7
6.3.6
6.3.5
6.3.4
6.3.3
6.3.2
6.3.1
6.3.0
6.2.11
6.2.10
6.2.9
6.2.8
6.2.7
6.2.6
6.2.5
6.2.4
6.2.3
6.2.2
6.2.1
6.2.0
6.1.9
6.1.8
6.1.7
6.1.6
6.1.5
6.1.4
6.1.3
6.1.2
6.1.1
6.1.0
6.0.9
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
6.0.0
5.5.20
5.5.19
5.5.18
5.5.17
5.5.16
5.5.15
5.5.14
5.5.13
5.5.12
5.5.11
5.5.10
5.5.9
5.5.8
5.5.7
5.5.6
5.5.5
5.5.4
5.5.3
5.5.2
5.5.1
5.5.0
5.4.13
5.4.12
5.4.11
5.4.10
5.4.9
5.4.8
5.4.7
5.4.6
5.4.5
5.4.4
5.4.3
5.4.2
5.4.1
5.4.0
5.3.10
5.3.9
5.3.8
5.3.7
5.3.6
5.2.11
5.3.5
4.3.24
5.2.10
5.3.4
5.2.9
5.3.3
5.1.13
5.3.2
5.3.1
5.3.0
5.2.8
5.2.7
5.2.6
5.2.5
5.2.4
5.2.3
5.2.2
5.2.1
5.2.0
5.1.12
5.1.11
5.1.10
5.1.9
5.1.8
5.1.7
5.1.6
5.1.5
5.1.4
5.1.3
5.0.14
5.0.13
5.0.12
4.3.23
4.3.22
4.3.21
4.3.20
4.2.13
4.2.12
4.2.11
4.2.10
4.2.9
4.2.8
4.2.7
4.2.6
4.2.5
4.2.4
4.2.3
4.2.2
4.2.1
4.2.0
4.1.9
4.1.8
4.1.7
4.1.6
4.1.5
4.1.4
4.1.3
4.1.2
4.1.1
4.1.0
4.0.9
4.0.8
4.0.7
4.0.6
4.0.5
4.0.4
4.0.3
4.0.2
4.0.1
4.0.0
3.0.8
3.0.7
3.0.6
3.0.5
3.0.4
3.0.3
3.0.2
3.0.1
3.0.0
2.2.7
2.2.6
2.2.5
2.2.4
2.2.3
2.2.2
2.2.0
2.1.5
2.1.4
2.1.2
2.1.1
2.1.0
2.0.6
2.0.5
2.0.4
2.0.3
2.0.2
2.0.1
2.0.0
1.0.4
1.0.3
1.0.2
1.0.1
1.0.0
5.1.2
5.1.1
5.1.0
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
5.0.0
4.3.19
4.3.18
4.3.17
4.3.16
4.3.15
4.3.14
4.3.13
4.3.12
4.3.11
4.3.10
4.3.9
4.3.8
4.3.7
4.3.6
4.3.5
4.3.4
4.3.3
4.3.2
4.3.1
4.3.0
Vulnerabilities (18)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU146216 - Resource exhaustion CVE-2026-59274 |
CWE-400 | Low | 6.4.13, 6.5.11, 7.0.5.1, 7.0.6, 7.1.0.1, 7.1.1 | 28.08.2026 |
SB20260828162 SB2026090929 |
||
| #VU146214 - Improper input validation CVE-2026-59322 |
CWE-20 | Low | 5.5.22, 6.4.13, 6.5.11, 7.0.5.1, 7.0.6, 7.1.0.1, 7.1.1 | 28.08.2026 |
SB20260828162 SB2026090929 |
||
| #VU146213 - Exposure of resource to wrong sphere CVE-2026-59324 |
CWE-668 | High | 5.5.22, 6.4.13, 6.5.11, 7.0.5.1, 7.0.6, 7.1.0.1, 7.1.1 | 28.08.2026 |
SB20260828162 SB2026090929 |
||
| #VU146212 - Improper Link Resolution Before File Access ('Link Following') CVE-2026-59311 |
CWE-59 | Low | 6.4.13, 6.5.11, 7.0.5.1, 7.0.6, 7.1.0.1, 7.1.1 | 28.08.2026 |
SB20260828162 SB2026090929 |
||
| #VU146210 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2026-59321 |
CWE-362 | Low | 5.5.22, 6.4.13, 6.5.11, 7.0.5.1, 7.0.6, 7.1.0.1, 7.1.1 | 28.08.2026 |
SB20260828162 SB2026090929 |
||
| #VU146208 - Incorrect Permission Assignment for Critical Resource CVE-2026-59292 |
CWE-732 | Low | 5.5.22, 6.4.13, 6.5.11, 7.0.5.1, 7.0.6, 7.1.0.1, 7.1.1 | 28.08.2026 |
SB20260828162 SB2026090929 |
||
| #VU146207 - Insecure Default Initialization of Resource CVE-2026-59293 |
CWE-1188 | Low | 6.4.13, 6.5.11, 7.0.5.1, 7.0.6, 7.1.0.1, 7.1.1 | 28.08.2026 |
SB20260828162 SB2026090929 |
||
| #VU146206 - Protection Mechanism Failure CVE-2026-59307 |
CWE-693 | Low | 6.4.13, 6.5.11, 7.0.5.1, 7.0.6, 7.1.0.1, 7.1.1 | 28.08.2026 |
SB20260828162 SB2026090929 |
||
| #VU146201 - Improper input validation CVE-2026-47880 |
CWE-20 | Low | 5.5.22, 6.4.13, 6.5.11, 7.0.5.1, 7.0.6, 7.1.0.1, 7.1.1 | 28.08.2026 |
SB20260828162 SB2026090929 |
||
| #VU146200 - Deserialization of Untrusted Data CVE-2026-47864 |
CWE-502 | Low | 5.5.22, 6.4.13, 6.5.11, 7.0.5.1, 7.0.6, 7.1.0.1, 7.1.1 | 28.08.2026 |
SB20260828162 SB2026090929 |
||
| #VU146199 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-47862 |
CWE-22 | Low | 6.4.13, 6.5.11, 7.0.5.1, 7.0.6, 7.1.0.1, 7.1.1 | 28.08.2026 |
SB20260828162 SB2026090929 |
||
| #VU146198 - Improper input validation CVE-2026-47861 |
CWE-20 | Low | 5.5.22, 6.4.13, 6.5.11, 7.0.5.1, 7.0.6, 7.1.0.1, 7.1.1 | 28.08.2026 |
SB20260828162 SB2026090929 |
||
| #VU146196 - Improper input validation CVE-2026-47856 |
CWE-20 | Low | 5.5.22, 6.4.13, 6.5.11, 7.0.5.1, 7.0.6, 7.1.0.1, 7.1.1 | 28.08.2026 |
SB20260828162 SB2026090929 |
||
| #VU146195 - Improper input validation CVE-2026-47859 |
CWE-20 | Low | 5.5.22, 6.4.13, 6.5.11, 7.0.5.1, 7.0.6, 7.1.0.1, 7.1.1 | 28.08.2026 |
SB20260828162 SB2026090929 |
||
| #VU146193 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-40987 |
CWE-22 | Low | 5.5.21, 6.3.15, 6.4.12, 6.5.8.1, 6.5.9, 7.0.4.1, 7.0.5 | 28.08.2026 |
SB20260828160 |
||
| #VU52283 - Loop with Unreachable Exit Condition ('Infinite Loop') |
CWE-835 | Medium | 5.3.7 | 15.04.2021 |
SB2021041523 |
||
| #VU31796 - Deserialization of Untrusted Data CVE-2020-5413 |
CWE-502 | High | 4.3.23, 5.1.12, 5.2.8, 5.3.2 | 24.07.2020 |
SB2020072408 SB2021042523 SB2021072724 |
||
| #VU17187 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2019-3772 |
CWE-611 | Low | 4.3.19, 5.0.11, 5.1.2 | 24.01.2019 |
SB2019012404 |