Known vulnerabilities in Spring Security 4.2.3

Vendor: Broadcom
Version: 4.2.3
Software CPE: cpe:2.3:a:broadcom:spring_security:*:*:*:*:*:*:*:*
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Spring Security version 4.2.3 Spring Security 4.2.3 is affected by 2 vulnerabilities: 1 medium, 1 low Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU28463 - Use of Insufficiently Random Values
CVE-2020-5408
CWE-330 Medium
No
No
4.2.16, 5.0.16, 5.1.10, 5.2.4, 5.3.2 01.06.2020 SB2020060107
SB2020102832
SB2020102833
and 13 more
#VU18957 - Credentials Management
CVE-2019-11272
CWE-255 Low
No
No
4.2.13 02.07.2019 SB2019070206
SB2020032701
SB2023062703
and 1 more