Vendor

    Spring By Vmware

    10 known vulnerabilities in products by Spring By Vmware, 1 of them actively exploited (CISA KEV).

    Key figures

    10

    Vulnerabilities

    1

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Spring By Vmware
    CriticalCVE-2020-5410

    Directory Traversal with spring-cloud-config-server

    In CISA KEValso in 1 other product

    		7.5
    HighCVE-2020-5421

    RFD Protection Bypass via jsessionid

    also in 36 other products

    		8.7
    CriticalCVE-2020-5413

    Kryo Configuration Allows Code Execution with Unknown "Serialization Gadgets"

    also in 8 other products

    		9.8
    MediumCVE-2020-5405

    Directory Traversal with spring-cloud-config-server

    also in 1 other product

    		6.5
    MediumCVE-2020-5412

    Hystrix Dashboard Proxy In spring-cloud-netflix-hystrix-dashboard

    also in 1 other product

    		6.5
    HighCVE-2020-5411

    Jackson Configuration Allows Code Execution with Unknown "Serialization Gadgets"

    also in 1 other product

    		8.1
    HighCVE-2020-5407

    Signature Wrapping Vulnerability with spring-security-saml2-service-provider

    also in 1 other product

    		8.8
    MediumCVE-2020-5408

    Dictionary attack with Spring Security queryable text encryptor

    also in 2 other products

    		6.5
    HighCVE-2020-5427

    Possibility of SQL Injection in Spring Cloud Data Flow Task Execution Sorting Query

    also in 1 other product

    		5.7
    MediumCVE-2020-5428

    Possibility of SQL Injection in Spring Cloud Task Execution Sorting Query

    also in 1 other product

    		5.1