Known vulnerabilities in Spring Security
Vendor:
Broadcom
Software:
Spring Security
Software CPE:
cpe:2.3:a:broadcom:spring_security:*:*:*:*:*:*:*:*
Website:
https://www.broadcom.com/
Total vulnerabilities:
37
Public exploits:
3
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
6.3.16
5.8.25
5.7.23
6.4.16
6.4.15
6.3.15
5.8.24
6.4.14
6.3.14
6.3.13
6.3.12
6.3.11
5.8.23
5.8.22
5.8.21
5.8.20
5.7.22
5.7.21
5.7.20
5.7.19
5.7.18
7.0.4
6.5.9
7.0.3
6.5.8
7.0.2
7.0.1
7.0.0
6.5.7
6.4.13
6.5.6
6.4.12
6.5.5
6.4.11
6.5.4
6.4.10
6.5.3
6.4.9
6.5.2
6.4.8
6.5.1
6.4.7
6.3.10
6.5.0
6.4.6
5.7.17
5.8.19
6.0.17
6.1.15
6.2.11
6.4.5
6.3.9
5.7.16
5.8.18
6.0.16
6.1.14
6.2.10
5.7.15
5.8.17
6.0.15
6.1.13
6.2.9
6.4.4
6.3.8
6.4.3
6.3.7
6.4.2
6.3.6
6.4.1
6.1.12
6.0.14
6.4.0
6.3.5
6.2.8
5.8.16
5.7.14
6.1.11
6.1.10
6.0.13
6.0.12
6.0.11
6.3.4
6.2.7
5.8.15
5.7.13
6.3.3
6.3.2
6.2.6
5.8.14
6.3.1
6.2.5
5.8.13
6.3.0
6.2.4
6.1.9
5.8.12
6.0.10
6.0.9
6.2.3
6.1.8
5.8.11
5.7.12
6.2.2
6.1.7
5.8.10
5.8.9
6.2.1
6.1.6
6.2.0
6.1.5
6.0.8
5.8.8
6.1.4
6.0.7
5.8.7
5.7.11
6.1.3
6.0.6
5.8.6
6.1.2
6.0.5
5.8.5
5.7.10
5.6.12
6.1.1
6.0.4
5.8.4
5.7.9
5.6.11
6.1.0
6.0.3
5.8.3
5.7.8
5.4.11
5.7.7
6.0.2
5.8.2
6.0.1
5.8.1
5.7.6
5.6.10
6.0.0
5.8.0
5.7.5
5.6.9
5.7.4
5.6.8
5.7.3
5.6.7
5.7.2
5.6.6
5.7.1
5.6.5
5.5.8
5.5.0-M1
5.4.0-M1
5.7.0
5.6.4
5.5.7
5.6.3
5.5.6
5.6.2
5.5.5
5.6.1
5.4.10
5.5.4
5.6.0
5.5.3
5.4.9
5.4.8
5.5.2
5.4.7
5.5.1
5.4.6
5.3.7
5.2.9
5.3.8
5.4.5
5.4.3
5.4.4
4.2.20
5.4.2
5.3.6
5.2.8
5.5.0
5.4.1
5.3.5
4.2.19
5.0.19
5.1.13
5.2.7
5.1.12
5.3.4
5.0.18
5.2.6
4.2.18
5.4.0-M2
5.0.17
5.1.11
5.2.5
5.3.3
4.2.17
5.4.0
5.3.2
5.3.1
5.3.0
5.2.4
5.2.3
5.2.2
5.2.1
5.2.0
5.1.10
5.1.9
5.1.8
5.1.7
5.1.6
5.1.5
5.1.4
5.1.3
5.1.2
5.1.1
5.1.0
5.0.16
5.0.15
5.0.14
5.0.13
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
5.0.0
4.2.16
4.2.15
4.2.14
4.2.13
4.2.12
4.2.11
4.2.10
4.2.9
4.2.7
4.2.6
4.2.5
4.2.4
4.2.3
4.2.2
4.2.1
4.2.0
4.1.5
4.1.4
4.1.3
4.1.2
4.1.1
4.1.0
4.0.4
4.0.3
4.0.2
4.0.1
4.0.0
3.2.10
3.2.9
3.2.8
3.2.7
3.2.6
3.2.5
3.2.4
3.2.3
3.2.2
3.2.1
3.2.0
3.1.7
3.1.6
3.1.5
3.1.4
3.1.3
3.1.2
3.1.1
3.1.0
3.0.8
3.0.7
3.0.6
3.0.5
3.0.4
3.0.3
3.0.2
3.0.1
3.0.0
2.5.0
2.0.8
2.0.7
2.0.6
2.0.5
2.0.4
2.0.3
2.0.2
2.0.1
2.0.0
1.0.7
1.0.6
1.0.5
1.0.4
1.0.3
1.0.2
1.0.1
1.0.0
7.1.1
7.0.7
7.1.0
7.0.6
6.5.11
7.0.5
6.5.10
Vulnerabilities (37)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU139383 - Improper Authentication CVE-2026-47838 |
CWE-287 | Low | 6.5.11 | 26.07.2026 |
SB2026072608 SB2026072615 SB2026072621 |
||
| #VU128373 - Protection Mechanism Failure CVE-2026-22732 |
CWE-693 | High | 5.7.22, 5.8.24, 6.3.15, 6.4.15, 6.5.9, 7.0.4 | 28.04.2026 |
SB20260427181 SB2026043058 SB2026050514 and 5 more |
||
| #VU128228 - Improper input validation CVE-2026-22747 |
CWE-20 | Low | 7.0.5 | 27.04.2026 |
SB20260427181 |
||
| #VU128227 - Improper Access Control CVE-2026-22753 |
CWE-284 | Medium | 7.0.5 | 27.04.2026 |
SB20260427181 SB2026062910 |
||
| #VU128226 - Improper Access Control CVE-2026-22754 |
CWE-284 | Medium | 7.0.5 | 27.04.2026 |
SB20260427181 SB2026062910 |
||
| #VU128225 - Configuration CVE-2026-22748 |
CWE-16 | Low | 6.3.15, 6.4.16, 6.5.10, 7.0.5 | 27.04.2026 |
SB20260427181 SB2026052513 |
||
| #VU128224 - Observable discrepancy CVE-2026-22746 |
CWE-203 | Low | 5.7.23, 5.8.25, 6.3.16, 6.4.16, 6.5.10, 7.0.5 | 27.04.2026 |
SB20260427181 SB2026052513 SB2026060828 and 1 more |
||
| #VU128223 - Improper input validation CVE-2026-22752 |
CWE-20 | Medium | 7.0.5 | 27.04.2026 |
SB20260427181 SB20260427183 SB2026052513 and 1 more |
||
| #VU128222 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2026-22751 |
CWE-367 | Medium | 6.4.16, 6.5.10, 7.0.5 | 27.04.2026 |
SB20260427181 SB2026052513 SB2026060828 and 1 more |
||
| #VU115570 - Protection Mechanism Failure CVE-2025-41248 |
CWE-693 | Medium | 6.4.10, 6.5.4 | 16.09.2025 |
SB20250916313 SB2025100741 SB20251008143 and 33 more |
||
| #VU109589 - Improper Authorization CVE-2025-41232 |
CWE-285 | High | 6.4.6 | 21.05.2025 |
SB20250521100 SB2025060636 SB2025070708 and 5 more |
||
| #VU107857 - Protection Mechanism Failure CVE-2025-22234 |
CWE-693 | Low | 5.7.17, 5.8.19, 6.0.17, 6.1.15, 6.2.11, 6.3.9, 6.4.5 | 23.04.2025 |
SB2025042310 |
||
| #VU105881 - Security Features CVE-2025-22228 |
CWE-254 | Low | 5.7.16, 5.8.18, 6.0.16, 6.1.14, 6.2.10, 6.3.8, 6.4.4 | 19.03.2025 |
SB2025031966 SB2025040327 SB2025061733 and 24 more |
||
| #VU105880 - Improper Authorization CVE-2025-22223 |
CWE-285 | Medium | 6.4.4 | 19.03.2025 |
SB2025031966 SB2025070708 SB2025072884 and 1 more |
||
| #VU100676 - Improper Authorization CVE-2024-38827 |
CWE-285 | Medium | 5.7.14, 5.8.16, 6.0.14, 6.1.12, 6.2.8, 6.3.5 | 19.11.2024 |
SB2024111987 SB2025012185 SB2025012188 and 30 more |
||
| #VU99267 - Improper Authorization CVE-2024-38821 |
CWE-285 | Medium | 5.7.13, 5.8.15, 6.0.13, 6.1.11, 6.2.7, 6.3.4 | 23.10.2024 |
SB2024102307 SB2024112849 SB2024112910 and 13 more |
||
| #VU96227 - Missing Authorization CVE-2024-38810 |
CWE-862 | Medium | 6.3.2 | 20.08.2024 |
SB2024082004 SB2024100811 SB2025020318 |
||
| #VU87607 - Improper Access Control CVE-2024-22257 |
CWE-284 | Medium | 5.7.12, 5.8.11, 6.1.8, 6.2.3 | 19.03.2024 |
SB2024031915 SB2024041659 SB2024041660 and 26 more |
||
| #VU86694 - Improper Access Control CVE-2024-22234 |
CWE-284 | Medium | 6.1.7, 6.2.2 | 21.02.2024 |
SB2024022139 SB2024041137 SB2024061708 and 3 more |
||
| #VU80886 - Incorrect Permission Assignment for Critical Resource CVE-2023-34042 |
CWE-732 | Low | 5.7.11, 5.8.7, 6.0.7, 6.1.4 | 19.09.2023 |
SB2023091922 SB2023112217 SB2023120414 and 6 more |
Showing elements 1 - 20 out of 37