Skip to content
CVE Tracker
Pivotal

Pivotal Spring Security vulnerabilities

3 published CVEs name Pivotal Spring Security among the affected products.

Published CVEs
3
Last 12 months
0
Critical
1
Known exploited
0

Critical 1High 2Medium 0Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20171
  2. 20172

Newest CVEs

  • CVE-2016-5007

    Both Spring Security 3.2.x, 4.0.x, 4.1.0 and the Spring Framework 3.2.x, 4.0.x, 4.1.x, 4.2.x rely on URL pattern mappings for authorization and for mapping…

    Pivotal · Spring Security

    High7.5
  • CVE-2014-3527

    When using the CAS Proxy ticket authentication from Spring Security 3.1 to 3.2.4 a malicious CAS Service could trick another CAS Service into authenticating a…

    Pivotal · Spring Security

    Critical9.8
  • CVE-2014-0097

    The ActiveDirectoryLdapAuthenticator in Spring Security 3.2.0 to 3.2.1 and 3.1.0 to 3.1.5 does not check the password length. If the directory allows anonymous…

    Pivotal · Spring Security

    High7.3