Known vulnerabilities in springframework-expression

Vendor: openEuler
Software: springframework-expression
Software CPE: cpe:2.3:o:openeuler:springframework-expression:*:*:*:*:*:openeuler:*:*
Website: https://www.openeuler.org/
Total vulnerabilities: 6
Public exploits: 2
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting springframework-expression springframework-expression is affected by 6 known vulnerabilities: 1 critical, 1 high, 4 medium Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82532 - Permissions, Privileges, and Access Controls
CVE-2016-5007		 CWE-264 Medium
No
No
 3.2.18-8 27.10.2023 SB2023102710
SB2021110524
SB2025051926
and 1 more
#VU61760 - Incorrect Regular Expression
CVE-2022-22950		 CWE-185 Medium
No
No
 3.2.18-14 31.03.2022 SB2022033110
SB2022060308
SB2022060324
and 25 more
#VU59098 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44832		 CWE-94 Medium
No
No
 3.2.18-11 28.12.2021 SB2021122816
SB2021123002
SB2022010601
and 197 more
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-45105		 CWE-835 Medium
Available
No
 3.2.18-10 18.12.2021 SB2021121802
SB2021121903
SB2021122011
and 170 more
#VU58976 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-45046		 CWE-94 High
Available
Exploited
 3.2.18-9, 3.2.18-10 15.12.2021 SB2021121504
SB2021121511
SB2021121512
and 179 more
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228		 CWE-94 Critical
Available
Exploited
 3.2.18-9, 3.2.18-10 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 339 more