Known vulnerabilities in Spring Integration 6.4.0-M1

Vendor: Broadcom
Version: 6.4.0-M1
Software CPE: cpe:2.3:a:broadcom:spring_integration:*:*:*:*:*:*:*:*
Total vulnerabilities: 15
Public exploits: 0
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Spring Integration version 6.4.0-M1 Spring Integration 6.4.0-M1 is affected by 15 vulnerabilities: 1 high, 14 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146216 - Resource exhaustion
CVE-2026-59274
CWE-400 Low
No
No
6.4.13, 6.5.11, 7.0.5.1, 7.0.6, 7.1.0.1, 7.1.1 28.08.2026 SB20260828162
SB2026090929
#VU146214 - Improper input validation
CVE-2026-59322
CWE-20 Low
No
No
5.5.22, 6.4.13, 6.5.11, 7.0.5.1, 7.0.6, 7.1.0.1, 7.1.1 28.08.2026 SB20260828162
SB2026090929
#VU146213 - Exposure of resource to wrong sphere
CVE-2026-59324
CWE-668 High
No
No
5.5.22, 6.4.13, 6.5.11, 7.0.5.1, 7.0.6, 7.1.0.1, 7.1.1 28.08.2026 SB20260828162
SB2026090929
#VU146212 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-59311
CWE-59 Low
No
No
6.4.13, 6.5.11, 7.0.5.1, 7.0.6, 7.1.0.1, 7.1.1 28.08.2026 SB20260828162
SB2026090929
#VU146210 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-59321
CWE-362 Low
No
No
5.5.22, 6.4.13, 6.5.11, 7.0.5.1, 7.0.6, 7.1.0.1, 7.1.1 28.08.2026 SB20260828162
SB2026090929
#VU146208 - Incorrect Permission Assignment for Critical Resource
CVE-2026-59292
CWE-732 Low
No
No
5.5.22, 6.4.13, 6.5.11, 7.0.5.1, 7.0.6, 7.1.0.1, 7.1.1 28.08.2026 SB20260828162
SB2026090929
#VU146207 - Insecure Default Initialization of Resource
CVE-2026-59293
CWE-1188 Low
No
No
6.4.13, 6.5.11, 7.0.5.1, 7.0.6, 7.1.0.1, 7.1.1 28.08.2026 SB20260828162
SB2026090929
#VU146206 - Protection Mechanism Failure
CVE-2026-59307
CWE-693 Low
No
No
6.4.13, 6.5.11, 7.0.5.1, 7.0.6, 7.1.0.1, 7.1.1 28.08.2026 SB20260828162
SB2026090929
#VU146201 - Improper input validation
CVE-2026-47880
CWE-20 Low
No
No
5.5.22, 6.4.13, 6.5.11, 7.0.5.1, 7.0.6, 7.1.0.1, 7.1.1 28.08.2026 SB20260828162
SB2026090929
#VU146200 - Deserialization of Untrusted Data
CVE-2026-47864
CWE-502 Low
No
No
5.5.22, 6.4.13, 6.5.11, 7.0.5.1, 7.0.6, 7.1.0.1, 7.1.1 28.08.2026 SB20260828162
SB2026090929
#VU146199 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-47862
CWE-22 Low
No
No
6.4.13, 6.5.11, 7.0.5.1, 7.0.6, 7.1.0.1, 7.1.1 28.08.2026 SB20260828162
SB2026090929
#VU146198 - Improper input validation
CVE-2026-47861
CWE-20 Low
No
No
5.5.22, 6.4.13, 6.5.11, 7.0.5.1, 7.0.6, 7.1.0.1, 7.1.1 28.08.2026 SB20260828162
SB2026090929
#VU146196 - Improper input validation
CVE-2026-47856
CWE-20 Low
No
No
5.5.22, 6.4.13, 6.5.11, 7.0.5.1, 7.0.6, 7.1.0.1, 7.1.1 28.08.2026 SB20260828162
SB2026090929
#VU146195 - Improper input validation
CVE-2026-47859
CWE-20 Low
No
No
5.5.22, 6.4.13, 6.5.11, 7.0.5.1, 7.0.6, 7.1.0.1, 7.1.1 28.08.2026 SB20260828162
SB2026090929
#VU146193 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-40987
CWE-22 Low
No
No
5.5.21, 6.3.15, 6.4.12, 6.5.8.1, 6.5.9, 7.0.4.1, 7.0.5 28.08.2026 SB20260828160