Known vulnerabilities in Spring Security
Vendor:
Broadcom
Software:
Spring Security
Software CPE:
cpe:2.3:a:broadcom:spring_security:*:*:*:*:*:*:*:*
Website:
https://www.broadcom.com/
Total vulnerabilities:
51
Public exploits:
3
Known exploited (KEV):
0
Breakdown by Severity Chart
5.7.26
5.8.28
6.4.19
6.5.12
7.0.6.1
7.1.0.1
6.4.17
6.3.17
5.8.26
5.7.24
6.3.16
5.8.25
5.7.23
6.4.16
6.4.15
6.3.15
5.8.24
6.4.14
6.3.14
6.3.13
6.3.12
6.3.11
5.8.23
5.8.22
5.8.21
5.8.20
5.7.22
5.7.21
5.7.20
5.7.19
5.7.18
7.0.4
6.5.9
7.0.3
6.5.8
7.0.2
7.0.1
7.0.0
6.5.7
6.4.13
6.5.6
6.4.12
6.5.5
6.4.11
6.5.4
6.4.10
6.5.3
6.4.9
6.5.2
6.4.8
6.5.1
6.4.7
6.3.10
6.5.0
6.4.6
5.7.17
5.8.19
6.0.17
6.1.15
6.2.11
6.4.5
6.3.9
5.7.16
5.8.18
6.0.16
6.1.14
6.2.10
5.7.15
5.8.17
6.0.15
6.1.13
6.2.9
6.4.4
6.3.8
6.4.3
6.3.7
6.4.2
6.3.6
6.4.1
6.1.12
6.0.14
6.4.0
6.3.5
6.2.8
5.8.16
5.7.14
6.1.11
6.1.10
6.0.13
6.0.12
6.0.11
6.3.4
6.2.7
5.8.15
5.7.13
6.3.3
6.3.2
6.2.6
5.8.14
6.3.1
6.2.5
5.8.13
6.3.0
6.2.4
6.1.9
5.8.12
6.0.10
6.0.9
6.2.3
6.1.8
5.8.11
5.7.12
6.2.2
6.1.7
5.8.10
5.8.9
6.2.1
6.1.6
6.2.0
6.1.5
6.0.8
5.8.8
6.1.4
6.0.7
5.8.7
5.7.11
6.1.3
6.0.6
5.8.6
6.1.2
6.0.5
5.8.5
5.7.10
5.6.12
6.1.1
6.0.4
5.8.4
5.7.9
5.6.11
6.1.0
6.0.3
5.8.3
5.7.8
5.4.11
5.7.7
6.0.2
5.8.2
6.0.1
5.8.1
5.7.6
5.6.10
6.0.0
5.8.0
5.7.5
5.6.9
5.7.4
5.6.8
5.7.3
5.6.7
5.7.2
5.6.6
5.7.1
5.6.5
5.5.8
5.5.0-M1
5.4.0-M1
5.7.0
5.6.4
5.5.7
5.6.3
5.5.6
5.6.2
5.5.5
5.6.1
5.4.10
5.5.4
5.6.0
5.5.3
5.4.9
5.4.8
5.5.2
5.4.7
5.5.1
5.4.6
5.3.7
5.2.9
5.3.8
5.4.5
5.4.3
5.4.4
4.2.20
5.4.2
5.3.6
5.2.8
5.5.0
5.4.1
5.3.5
4.2.19
5.0.19
5.1.13
5.2.7
5.1.12
5.3.4
5.0.18
5.2.6
4.2.18
5.4.0-M2
5.0.17
5.1.11
5.2.5
5.3.3
4.2.17
5.4.0
5.3.2
5.3.1
5.3.0
5.2.4
5.2.3
5.2.2
5.2.1
5.2.0
5.1.10
5.1.9
5.1.8
5.1.7
5.1.6
5.1.5
5.1.4
5.1.3
5.1.2
5.1.1
5.1.0
5.0.16
5.0.15
5.0.14
5.0.13
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
5.0.0
4.2.16
4.2.15
4.2.14
4.2.13
4.2.12
4.2.11
4.2.10
4.2.9
4.2.7
4.2.6
4.2.5
4.2.4
4.2.3
4.2.2
4.2.1
4.2.0
4.1.5
4.1.4
4.1.3
4.1.2
4.1.1
4.1.0
4.0.4
4.0.3
4.0.2
4.0.1
4.0.0
3.2.10
3.2.9
3.2.8
3.2.7
3.2.6
3.2.5
3.2.4
3.2.3
3.2.2
3.2.1
3.2.0
3.1.7
3.1.6
3.1.5
3.1.4
3.1.3
3.1.2
3.1.1
3.1.0
3.0.8
3.0.7
3.0.6
3.0.5
3.0.4
3.0.3
3.0.2
3.0.1
3.0.0
2.5.0
2.0.8
2.0.7
2.0.6
2.0.5
2.0.4
2.0.3
2.0.2
2.0.1
2.0.0
1.0.7
1.0.6
1.0.5
1.0.4
1.0.3
1.0.2
1.0.1
1.0.0
7.1.1
7.0.7
7.1.0
7.0.6
6.5.11
7.0.5
6.5.10
Vulnerabilities (51)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU146380 - Improper Access Control CVE-2026-59277 |
CWE-284 | Low | 7.1.0.1, 7.1.1 | 31.08.2026 |
SB20260828170 |
||
| #VU146379 - Information Exposure Through Timing Discrepancy CVE-2026-59276 |
CWE-208 | Medium | 5.7.26, 5.8.28, 6.4.19, 6.5.12, 7.0.6.1, 7.0.7, 7.1.0.1, 7.1.1 | 31.08.2026 |
SB20260828170 SB2026090929 |
||
| #VU146378 - Improper Access Control CVE-2026-59270 |
CWE-284 | High | 5.7.26, 5.8.28, 6.4.19, 6.5.12, 7.0.6.1, 7.0.7, 7.1.0.1, 7.1.1 | 31.08.2026 |
SB20260828170 SB2026090929 |
||
| #VU146241 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-47877 |
CWE-79 | Medium | 7.0.6.1, 7.0.7, 7.1.0.1, 7.1.1 | 28.08.2026 |
SB20260828170 |
||
| #VU146240 - Not Using an Unpredictable IV with CBC Mode CVE-2026-47842 |
CWE-329 | Low | 5.7.26, 5.8.28, 6.4.19, 6.5.12, 7.0.6.1, 7.0.7, 7.1.0.1, 7.1.1 | 28.08.2026 |
SB20260828170 SB2026090929 |
||
| #VU146239 - Improper Authentication CVE-2026-47841 |
CWE-287 | Medium | 6.4.19, 6.5.12, 7.0.6.1, 7.0.7, 7.1.0.1, 7.1.1 | 28.08.2026 |
SB20260828170 SB2026090929 SB2026100618 |
||
| #VU146238 - Improper Access Control CVE-2026-41707 |
CWE-284 | Medium | 6.5.12, 7.0.6.1, 7.0.7, 7.1.0.1, 7.1.1 | 28.08.2026 |
SB20260828170 SB2026090929 |
||
| #VU146184 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2026-41706 |
CWE-601 | Medium | 5.7.24, 5.8.26, 6.3.17, 6.4.17, 6.5.11, 7.0.6 | 28.08.2026 |
SB20260828158 |
||
| #VU146183 - Improper Verification of Cryptographic Signature CVE-2026-41694 |
CWE-347 | Low | 5.7.24, 5.8.26, 6.3.17, 6.4.17, 6.5.11, 7.0.6 | 28.08.2026 |
SB20260828158 |
||
| #VU146182 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2026-41008 |
CWE-601 | Medium | 7.0.6 | 28.08.2026 |
SB20260828158 |
||
| #VU146181 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-41003 |
CWE-79 | Low | 5.7.24, 5.8.26, 6.3.17, 6.4.17, 6.5.11, 7.0.6 | 28.08.2026 |
SB20260828158 |
||
| #VU146180 - Resource exhaustion CVE-2026-40988 |
CWE-400 | Medium | 5.7.24, 5.8.26, 6.3.17, 6.4.17, 6.5.11, 7.0.6 | 28.08.2026 |
SB20260828158 |
||
| #VU146179 - Deserialization of Untrusted Data CVE-2026-40993 |
CWE-502 | Low | 7.0.6 | 28.08.2026 |
SB20260828158 |
||
| #VU139383 - Improper Authentication CVE-2026-47838 |
CWE-287 | Low | 6.5.11 | 26.07.2026 |
SB2026072608 SB2026072615 SB2026072621 and 2 more |
||
| #VU128228 - Improper input validation CVE-2026-22747 |
CWE-20 | Low | 7.0.5 | 27.04.2026 |
SB20260427181 |
||
| #VU128227 - Improper Access Control CVE-2026-22753 |
CWE-284 | Medium | 7.0.5 | 27.04.2026 |
SB20260427181 SB2026062910 |
||
| #VU128226 - Improper Access Control CVE-2026-22754 |
CWE-284 | Medium | 7.0.5 | 27.04.2026 |
SB20260427181 SB2026062910 |
||
| #VU128225 - Configuration CVE-2026-22748 |
CWE-16 | Low | 6.3.15, 6.4.16, 6.5.10, 7.0.5 | 27.04.2026 |
SB20260427181 SB2026052513 SB2026091410 |
||
| #VU128224 - Observable discrepancy CVE-2026-22746 |
CWE-203 | Low | 5.7.23, 5.8.25, 6.3.16, 6.4.16, 6.5.10, 7.0.5 | 27.04.2026 |
SB20260427181 SB2026052513 SB2026060828 and 1 more |
||
| #VU128222 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2026-22751 |
CWE-367 | Medium | 6.4.16, 6.5.10, 7.0.5 | 27.04.2026 |
SB20260427181 SB2026052513 SB2026060828 and 1 more |
Showing elements 1 - 20 out of 51