Known vulnerabilities in Spring Security 6.2.3

Vendor: Broadcom
Version: 6.2.3
Software CPE: cpe:2.3:a:broadcom:spring_security:*:*:*:*:*:*:*:*
Total vulnerabilities: 6
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Spring Security version 6.2.3 Spring Security 6.2.3 is affected by 6 vulnerabilities: 2 medium, 4 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139383 - Improper Authentication
CVE-2026-47838
CWE-287 Low
No
No
6.5.11 26.07.2026 SB2026072608
SB2026072615
SB2026072621
#VU128224 - Observable discrepancy
CVE-2026-22746
CWE-203 Low
No
No
5.7.23, 5.8.25, 6.3.16, 6.4.16, 6.5.10, 7.0.5 27.04.2026 SB20260427181
SB2026052513
SB2026060828
and 1 more
#VU107857 - Protection Mechanism Failure
CVE-2025-22234
CWE-693 Low
No
No
5.7.17, 5.8.19, 6.0.17, 6.1.15, 6.2.11, 6.3.9, 6.4.5 23.04.2025 SB2025042310
#VU105881 - Security Features
CVE-2025-22228
CWE-254 Low
No
No
5.7.16, 5.8.18, 6.0.16, 6.1.14, 6.2.10, 6.3.8, 6.4.4 19.03.2025 SB2025031966
SB2025040327
SB2025061733
and 24 more
#VU100676 - Improper Authorization
CVE-2024-38827
CWE-285 Medium
No
No
5.7.14, 5.8.16, 6.0.14, 6.1.12, 6.2.8, 6.3.5 19.11.2024 SB2024111987
SB2025012185
SB2025012188
and 30 more
#VU99267 - Improper Authorization
CVE-2024-38821
CWE-285 Medium
Public exploit available
No
5.7.13, 5.8.15, 6.0.13, 6.1.11, 6.2.7, 6.3.4 23.10.2024 SB2024102307
SB2024112849
SB2024112910
and 13 more