Known vulnerabilities in Spring Security - page 2

Vendor: Broadcom
Software CPE: cpe:2.3:a:broadcom:spring_security:*:*:*:*:*:*:*:*
Total vulnerabilities: 51
Public exploits: 3
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Spring Security Spring Security is affected by 51 known vulnerabilities: 9 high, 28 medium, 14 low Critical High Medium Low

Vulnerabilities (51)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146416 - Improper input validation
CVE-2026-59354
CWE-20 Medium
No
No
7.0.5 31.08.2026 SB20260427181
#VU128373 - Protection Mechanism Failure
CVE-2026-22732
CWE-693 High
No
No
5.7.22, 5.8.24, 6.3.15, 6.4.15, 6.5.9, 7.0.4 28.04.2026 SB20260427181
SB2026043058
SB2026050514
and 5 more
#VU128223 - Improper input validation
CVE-2026-22752
CWE-20 Medium
No
No
7.0.5 27.04.2026 SB20260427181
SB20260427183
SB2026052513
and 1 more
#VU115570 - Protection Mechanism Failure
CVE-2025-41248
CWE-693 Medium
No
No
6.4.10, 6.5.4 16.09.2025 SB20250916313
SB2025100741
SB20251008143
and 33 more
#VU109589 - Improper Authorization
CVE-2025-41232
CWE-285 High
No
No
6.4.6 21.05.2025 SB20250521100
SB2025060636
SB2025070708
and 5 more
#VU107857 - Protection Mechanism Failure
CVE-2025-22234
CWE-693 Low
No
No
5.7.17, 5.8.19, 6.0.17, 6.1.15, 6.2.11, 6.3.9, 6.4.5 23.04.2025 SB2025042310
#VU105881 - Security Features
CVE-2025-22228
CWE-254 Low
No
No
5.7.16, 5.8.18, 6.0.16, 6.1.14, 6.2.10, 6.3.8, 6.4.4 19.03.2025 SB2025031966
SB2025040327
SB2025061733
and 24 more
#VU105880 - Improper Authorization
CVE-2025-22223
CWE-285 Medium
No
No
6.4.4 19.03.2025 SB2025031966
SB2025070708
SB2025072884
and 1 more
#VU100676 - Improper Authorization
CVE-2024-38827
CWE-285 Medium
No
No
5.7.14, 5.8.16, 6.0.14, 6.1.12, 6.2.8, 6.3.5 19.11.2024 SB2024111987
SB2025012185
SB2025012188
and 30 more
#VU99267 - Improper Authorization
CVE-2024-38821
CWE-285 Medium
Available
No
5.7.13, 5.8.15, 6.0.13, 6.1.11, 6.2.7, 6.3.4 23.10.2024 SB2024102307
SB2024112849
SB2024112910
and 13 more
#VU96227 - Missing Authorization
CVE-2024-38810
CWE-862 Medium
No
No
6.3.2 20.08.2024 SB2024082004
SB2024100811
SB2025020318
#VU87607 - Improper Access Control
CVE-2024-22257
CWE-284 Medium
No
No
5.7.12, 5.8.11, 6.1.8, 6.2.3 19.03.2024 SB2024031915
SB2024041659
SB2024041660
and 26 more
#VU86694 - Improper Access Control
CVE-2024-22234
CWE-284 Medium
No
No
6.1.7, 6.2.2 21.02.2024 SB2024022139
SB2024041137
SB2024061708
and 3 more
#VU82227 - Incorrect Authorization
CVE-2023-34035
CWE-863 Medium
No
No
5.8.5, 6.0.5, 6.1.2 18.10.2023 SB2023071828
SB2023122252
SB2023122810
and 3 more
#VU80886 - Incorrect Permission Assignment for Critical Resource
CVE-2023-34042
CWE-732 Low
No
No
5.7.11, 5.8.7, 6.0.7, 6.1.4 19.09.2023 SB2023091922
SB2023112217
SB2023120414
and 6 more
#VU80880 - Security Features
CVE-2023-34034
CWE-254 High
No
No
5.6.12, 5.7.10, 5.8.5, 6.0.5, 6.1.2 19.09.2023 SB2023091914
SB2023100926
SB20231017104
and 22 more
#VU75408 - Security Features
CVE-2023-20862
CWE-254 Medium
No
No
5.7.8, 5.8.3, 6.0.3 21.04.2023 SB2023042130
SB2023042132
SB2023053121
and 20 more
#VU75044 - Uncontrolled Recursion
CVE-2023-1370
CWE-674 Medium
No
No
5.8.4 12.04.2023 SB2023041258
SB2023041259
SB2023041809
and 130 more
#VU68866 - Improper Authorization
CVE-2022-31692
CWE-285 High
No
No
5.6.9, 5.7.5 01.11.2022 SB2022110101
SB2022121119
SB2023011162
and 28 more
#VU68865 - Permissions, Privileges, and Access Controls
CVE-2022-31690
CWE-264 Medium
No
No
5.6.9, 5.7.5 01.11.2022 SB2022110101
SB2022121119
SB2023012108
and 9 more


Showing elements 21 - 40 out of 51