Known vulnerabilities in Spring Security 6.4.17

Vendor: Broadcom
Version: 6.4.17
Software CPE: cpe:2.3:a:broadcom:spring_security:*:*:*:*:*:*:*:*
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Spring Security version 6.4.17 Spring Security 6.4.17 is affected by 4 vulnerabilities: 1 high, 2 medium, 1 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146379 - Information Exposure Through Timing Discrepancy
CVE-2026-59276
CWE-208 Medium
No
No
5.7.26, 5.8.28, 6.4.19, 6.5.12, 7.0.6.1, 7.0.7, 7.1.0.1, 7.1.1 31.08.2026 SB20260828170
SB2026090929
#VU146378 - Improper Access Control
CVE-2026-59270
CWE-284 High
No
No
5.7.26, 5.8.28, 6.4.19, 6.5.12, 7.0.6.1, 7.0.7, 7.1.0.1, 7.1.1 31.08.2026 SB20260828170
SB2026090929
#VU146240 - Not Using an Unpredictable IV with CBC Mode
CVE-2026-47842
CWE-329 Low
No
No
5.7.26, 5.8.28, 6.4.19, 6.5.12, 7.0.6.1, 7.0.7, 7.1.0.1, 7.1.1 28.08.2026 SB20260828170
SB2026090929
#VU146239 - Improper Authentication
CVE-2026-47841
CWE-287 Medium
No
No
6.4.19, 6.5.12, 7.0.6.1, 7.0.7, 7.1.0.1, 7.1.1 28.08.2026 SB20260828170
SB2026090929
SB2026100618