Known vulnerabilities in Spring Security 5.8.4
Vendor:
Broadcom
Software:
Spring Security
Version:
5.8.4
Software CPE:
cpe:2.3:a:broadcom:spring_security:*:*:*:*:*:*:*:*
Website:
https://www.broadcom.com/
Total vulnerabilities:
10
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
6.3.16
5.8.25
5.7.23
6.4.16
6.4.15
6.3.15
5.8.24
6.4.14
6.3.14
6.3.13
6.3.12
6.3.11
5.8.23
5.8.22
5.8.21
5.8.20
5.7.22
5.7.21
5.7.20
5.7.19
5.7.18
7.0.4
6.5.9
7.0.3
6.5.8
7.0.2
7.0.1
7.0.0
6.5.7
6.4.13
6.5.6
6.4.12
6.5.5
6.4.11
6.5.4
6.4.10
6.5.3
6.4.9
6.5.2
6.4.8
6.5.1
6.4.7
6.3.10
6.5.0
6.4.6
5.7.17
5.8.19
6.0.17
6.1.15
6.2.11
6.4.5
6.3.9
5.7.16
5.8.18
6.0.16
6.1.14
6.2.10
5.7.15
5.8.17
6.0.15
6.1.13
6.2.9
6.4.4
6.3.8
6.4.3
6.3.7
6.4.2
6.3.6
6.4.1
6.1.12
6.0.14
6.4.0
6.3.5
6.2.8
5.8.16
5.7.14
6.1.11
6.1.10
6.0.13
6.0.12
6.0.11
6.3.4
6.2.7
5.8.15
5.7.13
6.3.3
6.3.2
6.2.6
5.8.14
6.3.1
6.2.5
5.8.13
6.3.0
6.2.4
6.1.9
5.8.12
6.0.10
6.0.9
6.2.3
6.1.8
5.8.11
5.7.12
6.2.2
6.1.7
5.8.10
5.8.9
6.2.1
6.1.6
6.2.0
6.1.5
6.0.8
5.8.8
6.1.4
6.0.7
5.8.7
5.7.11
6.1.3
6.0.6
5.8.6
6.1.2
6.0.5
5.8.5
5.7.10
5.6.12
6.1.1
6.0.4
5.8.4
5.7.9
5.6.11
6.1.0
6.0.3
5.8.3
5.7.8
5.4.11
5.7.7
6.0.2
5.8.2
6.0.1
5.8.1
5.7.6
5.6.10
6.0.0
5.8.0
5.7.5
5.6.9
5.7.4
5.6.8
5.7.3
5.6.7
5.7.2
5.6.6
5.7.1
5.6.5
5.5.8
5.5.0-M1
5.4.0-M1
5.7.0
5.6.4
5.5.7
5.6.3
5.5.6
5.6.2
5.5.5
5.6.1
5.4.10
5.5.4
5.6.0
5.5.3
5.4.9
5.4.8
5.5.2
5.4.7
5.5.1
5.4.6
5.3.7
5.2.9
5.3.8
5.4.5
5.4.3
5.4.4
4.2.20
5.4.2
5.3.6
5.2.8
5.5.0
5.4.1
5.3.5
4.2.19
5.0.19
5.1.13
5.2.7
5.1.12
5.3.4
5.0.18
5.2.6
4.2.18
5.4.0-M2
5.0.17
5.1.11
5.2.5
5.3.3
4.2.17
5.4.0
5.3.2
5.3.1
5.3.0
5.2.4
5.2.3
5.2.2
5.2.1
5.2.0
5.1.10
5.1.9
5.1.8
5.1.7
5.1.6
5.1.5
5.1.4
5.1.3
5.1.2
5.1.1
5.1.0
5.0.16
5.0.15
5.0.14
5.0.13
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
5.0.0
4.2.16
4.2.15
4.2.14
4.2.13
4.2.12
4.2.11
4.2.10
4.2.9
4.2.7
4.2.6
4.2.5
4.2.4
4.2.3
4.2.2
4.2.1
4.2.0
4.1.5
4.1.4
4.1.3
4.1.2
4.1.1
4.1.0
4.0.4
4.0.3
4.0.2
4.0.1
4.0.0
3.2.10
3.2.9
3.2.8
3.2.7
3.2.6
3.2.5
3.2.4
3.2.3
3.2.2
3.2.1
3.2.0
3.1.7
3.1.6
3.1.5
3.1.4
3.1.3
3.1.2
3.1.1
3.1.0
3.0.8
3.0.7
3.0.6
3.0.5
3.0.4
3.0.3
3.0.2
3.0.1
3.0.0
2.5.0
2.0.8
2.0.7
2.0.6
2.0.5
2.0.4
2.0.3
2.0.2
2.0.1
2.0.0
1.0.7
1.0.6
1.0.5
1.0.4
1.0.3
1.0.2
1.0.1
1.0.0
7.1.1
7.0.7
7.1.0
7.0.6
6.5.11
7.0.5
6.5.10
Vulnerabilities (10)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU139383 - Improper Authentication CVE-2026-47838 |
CWE-287 | Low | 6.5.11 | 26.07.2026 |
SB2026072608 SB2026072615 SB2026072621 |
||
| #VU128373 - Protection Mechanism Failure CVE-2026-22732 |
CWE-693 | High | 5.7.22, 5.8.24, 6.3.15, 6.4.15, 6.5.9, 7.0.4 | 28.04.2026 |
SB20260427181 SB2026043058 SB2026050514 and 5 more |
||
| #VU128224 - Observable discrepancy CVE-2026-22746 |
CWE-203 | Low | 5.7.23, 5.8.25, 6.3.16, 6.4.16, 6.5.10, 7.0.5 | 27.04.2026 |
SB20260427181 SB2026052513 SB2026060828 and 1 more |
||
| #VU107857 - Protection Mechanism Failure CVE-2025-22234 |
CWE-693 | Low | 5.7.17, 5.8.19, 6.0.17, 6.1.15, 6.2.11, 6.3.9, 6.4.5 | 23.04.2025 |
SB2025042310 |
||
| #VU105881 - Security Features CVE-2025-22228 |
CWE-254 | Low | 5.7.16, 5.8.18, 6.0.16, 6.1.14, 6.2.10, 6.3.8, 6.4.4 | 19.03.2025 |
SB2025031966 SB2025040327 SB2025061733 and 24 more |
||
| #VU100676 - Improper Authorization CVE-2024-38827 |
CWE-285 | Medium | 5.7.14, 5.8.16, 6.0.14, 6.1.12, 6.2.8, 6.3.5 | 19.11.2024 |
SB2024111987 SB2025012185 SB2025012188 and 30 more |
||
| #VU99267 - Improper Authorization CVE-2024-38821 |
CWE-285 | Medium | 5.7.13, 5.8.15, 6.0.13, 6.1.11, 6.2.7, 6.3.4 | 23.10.2024 |
SB2024102307 SB2024112849 SB2024112910 and 13 more |
||
| #VU87607 - Improper Access Control CVE-2024-22257 |
CWE-284 | Medium | 5.7.12, 5.8.11, 6.1.8, 6.2.3 | 19.03.2024 |
SB2024031915 SB2024041659 SB2024041660 and 26 more |
||
| #VU82227 - Incorrect Authorization CVE-2023-34035 |
CWE-863 | Medium | 5.8.5, 6.0.5, 6.1.2 | 18.10.2023 |
SB2023071828 SB2023122252 SB2023122810 and 3 more |
||
| #VU80886 - Incorrect Permission Assignment for Critical Resource CVE-2023-34042 |
CWE-732 | Low | 5.7.11, 5.8.7, 6.0.7, 6.1.4 | 19.09.2023 |
SB2023091922 SB2023112217 SB2023120414 and 6 more |