Pivotal Spring Framework vulnerabilities

CVEs per yearBy the year they were published

1. 20172
2. 20185

Newest CVEs

• CVE-2018-15756

  DoS Attack via Range Requests

  Pivotal · Spring framework

  High7.5
• CVE-2018-11040

  Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain…

  Pivotal · Spring Framework

  High7.5
• CVE-2018-11039

  Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions) allow web applications to change the HTTP…

  Pivotal · Spring Framework

  Medium5.9
• CVE-2018-1258

  Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security. An…

  Pivotal · Spring Framework

  High8.8
• CVE-2018-1257

  Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and older unsupported versions allows applications to expose STOMP over…

  Pivotal · Spring Framework

  Medium6.5
• CVE-2016-5007

  Both Spring Security 3.2.x, 4.0.x, 4.1.0 and the Spring Framework 3.2.x, 4.0.x, 4.1.x, 4.2.x rely on URL pattern mappings for authorization and for mapping…

  Pivotal · Spring Security

  High7.5
• CVE-2014-0225

  When processing user provided XML documents, the Spring Framework 4.0.0 to 4.0.4, 3.0.0 to 3.2.8, and possibly earlier unsupported versions did not disable by…

  Pivotal · Spring Framework

  High8.8