Known vulnerabilities in Library Support for Spring

Software CPE: cpe:2.3:a:ibm_corporation:library_support_for_spring:*:*:*:*:*:*:*:*
Total vulnerabilities: 41
Public exploits: 4
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Library Support for Spring Library Support for Spring is affected by 41 known vulnerabilities: 1 critical, 3 high, 28 medium, 9 low Critical High Medium Low

Vulnerabilities (41)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128385 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-22735
CWE-74 Low
No
No
- 28.04.2026 SB20260428206
SB2026043058
SB2026052217
and 4 more
#VU128373 - Protection Mechanism Failure
CVE-2026-22732
CWE-693 High
No
No
- 28.04.2026 SB20260427181
SB2026043058
SB2026050514
and 5 more
#VU128372 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-22737
CWE-22 Medium
No
No
- 28.04.2026 SB20260428206
SB2026043058
SB2026052218
and 4 more
#VU128371 - Improper Access Control
CVE-2026-22733
CWE-284 High
No
No
- 28.04.2026 SB20260428205
SB2026052937
SB2026061632
and 1 more
#VU128235 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-40977
CWE-59 Low
No
No
3.4.18 27.04.2026 SB20260427182
SB2026052513
SB2026052929
and 2 more
#VU128234 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2026-40975
CWE-338 Medium
No
No
3.4.18 27.04.2026 SB20260427182
SB2026052513
SB2026052929
and 3 more
#VU128233 - Improper Validation of Certificate with Host Mismatch
CVE-2026-40974
CWE-297 Medium
No
No
3.4.18 27.04.2026 SB20260427182
SB2026052513
SB20260528266
and 2 more
#VU128232 - Improper Access Control
CVE-2026-40973
CWE-284 Low
No
No
3.4.18 27.04.2026 SB20260427182
SB2026052513
SB2026052929
and 2 more
#VU128231 - Information Exposure Through Timing Discrepancy
CVE-2026-40972
CWE-208 Medium
No
No
3.4.18 27.04.2026 SB20260427182
SB2026052513
#VU128225 - Configuration
CVE-2026-22748
CWE-16 Low
No
No
3.4.18 27.04.2026 SB20260427181
SB2026052513
#VU128224 - Observable discrepancy
CVE-2026-22746
CWE-203 Low
No
No
3.4.18 27.04.2026 SB20260427181
SB2026052513
SB2026060828
and 1 more
#VU128223 - Improper input validation
CVE-2026-22752
CWE-20 Medium
No
No
3.4.18 27.04.2026 SB20260427181
SB20260427183
SB2026052513
#VU128222 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-22751
CWE-367 Medium
No
No
3.4.18 27.04.2026 SB20260427181
SB2026052513
SB2026060828
and 1 more
#VU126710 - Resource exhaustion
CVE-2026-22745
CWE-400 Medium
No
No
2.7.38 21.04.2026 SB2026042162
SB2026052514
SB2026060904
and 2 more
#VU126709 - Acceptance of Extraneous Untrusted Data With Trusted Data
CVE-2026-22741
CWE-349 Low
No
No
2.7.38 21.04.2026 SB2026042162
SB2026052514
SB20260528259
and 2 more
#VU126708 - Improper Resource Shutdown or Release
CVE-2026-22740
CWE-404 Low
No
No
2.7.38 21.04.2026 SB2026042162
SB2026052514
SB2026060812
#VU115573 - Protection Mechanism Failure
CVE-2025-41249
CWE-693 Medium
No
No
2.7.29 16.09.2025 SB20250916314
SB2025100741
SB20251008143
and 62 more
#VU114067 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-41242
CWE-22 Medium
No
No
2.7.29 14.08.2025 SB2025081411
SB2025100743
SB2025110336
and 18 more
#VU100680 - Improper input validation
CVE-2024-38828
CWE-20 Medium
No
No
- 20.11.2024 SB2024112009
SB2025021262
SB2025040424
and 15 more
#VU76601 - Deserialization of Untrusted Data
CVE-2016-1000027
CWE-502 High
No
No
- 29.05.2023 SB2023052915
SB2023060816
SB2023062703
and 24 more


Showing elements 1 - 20 out of 41