Spring by VMware vulnerabilities
10 published CVEs name Spring by VMware among the affected products; CISA lists 1 of them as exploited in the wild.
- Published CVEs
- 10
- Last 12 months
- 0
- Critical
- 1
- Known exploited
- 1
Critical 1High 4Medium 5Low 0Not scored 0
Known exploitedNewest addition to KEV first
- CVE-2020-5410
Directory Traversal with spring-cloud-config-server
Spring by VMware · Spring Cloud Config
ExploitedHigh7.5
Newest CVEs
- CVE-2020-5428
Possibility of SQL Injection in Spring Cloud Task Execution Sorting Query
Spring by VMware · Spring Cloud Task
Medium5.1 - CVE-2020-5427
Possibility of SQL Injection in Spring Cloud Data Flow Task Execution Sorting Query
Spring by VMware · Spring Cloud Data Flow
Medium5.7 - CVE-2020-5421
RFD Protection Bypass via jsessionid
Spring by VMware · Spring Framework
High8.7 - CVE-2020-5412
Hystrix Dashboard Proxy In spring-cloud-netflix-hystrix-dashboard
Spring by VMware · Spring Cloud Netflix
Medium6.5 - CVE-2020-5413
Kryo Configuration Allows Code Execution with Unknown "Serialization Gadgets"
Spring by VMware · Spring Integration
Critical9.8 - CVE-2020-5411
Jackson Configuration Allows Code Execution with Unknown "Serialization Gadgets"
Spring by VMware · Spring Batch
High8.1 - CVE-2020-5410
Directory Traversal with spring-cloud-config-server
Spring by VMware · Spring Cloud Config
ExploitedHigh7.5 - CVE-2020-5408
Dictionary attack with Spring Security queryable text encryptor
Spring by VMware · Spring Security
Medium6.5 - CVE-2020-5407
Signature Wrapping Vulnerability with spring-security-saml2-service-provider
Spring by VMware · Spring Security
High8.8 - CVE-2020-5405
Directory Traversal with spring-cloud-config-server
Spring by VMware · Spring Cloud Config
Medium6.5