Product by Broadcom

    Spring Authorization Server

    4 known vulnerabilities in Spring Authorization Server (Broadcom), 0 of them actively exploited (CISA KEV).

    Key figures

    4

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Spring Authorization Server (Broadcom)
    CriticalCVE-2026-22752

    Spring Authorization Server: Improper Authentication

    also in 1 other product

    		9.6
    HighCVE-2026-59316

    Spring Authorization Server Default Consent Page is vulnerable to Cross-Site Scripting (XSS)

    also in 1 other product

    		8.2
    MediumCVE-2026-59355

    Spring Authorization Server: Open Redirect via request_uri parameter

    also in 1 other product

    		6.1
    MediumCVE-2026-41008

    Spring Security Authorization Server Open Redirect via request_uri

    also in 3 other products

    		6.1

    News

    All products by Broadcom