Known vulnerabilities in Spring Security 5.6.3

Version: 5.6.3
Software CPE: cpe:2.3:a:vmware:spring_security:*:*:*:*:*:*:*:*
Total vulnerabilities: 6
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Spring Security version 5.6.3 Spring Security 5.6.3 is affected by 6 vulnerabilities: 3 high, 1 medium, 2 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU105881 - Security Features
CVE-2025-22228
CWE-254 Low
No
No
5.7.16, 5.8.18, 6.0.16, 6.1.14, 6.2.10, 6.3.8, 6.4.4 19.03.2025 SB2025031966
SB2025040327
SB2025061733
and 23 more
#VU68866 - Improper Authorization
CVE-2022-31692
CWE-285 High
No
No
5.6.9, 5.7.5 01.11.2022 SB2022110101
SB2022121119
SB2023011162
and 28 more
#VU68865 - Permissions, Privileges, and Access Controls
CVE-2022-31690
CWE-264 Medium
No
No
5.6.9, 5.7.5 01.11.2022 SB2022110101
SB2022121119
SB2023012108
and 9 more
#VU63345 - Improper Authorization
CVE-2022-22978
CWE-285 High
Public exploit available
No
5.5.7, 5.6.4 17.05.2022 SB2022051717
SB2022052009
SB2022052010
and 20 more
#VU63342 - Integer overflow
CVE-2022-22976
CWE-190 Low
Public exploit available
No
5.5.7, 5.6.4 17.05.2022 SB2022051717
SB2022052009
SB2022052010
and 7 more
#VU63301 - Improper Authorization
CVE-2022-22975
CWE-285 High
No
No
5.5.7, 5.6.4 17.05.2022 SB2022051717