Log in Start free

Spring by VMware

Products

ProductCVEsExploitedLatest
Spring Cloud Config21Jun 2, 2020
Spring Security2–May 14, 2020
Spring Cloud Netflix1–Aug 7, 2020
Spring Batch1–Jun 11, 2020
Spring Framework1–Sep 19, 2020
Spring Integration1–Jul 31, 2020
Spring Cloud Task1–Jan 27, 2021
Spring Cloud Data Flow1–Jan 27, 2021

Exploited and recent CVEs

  • CVE-2020-5410 High 7.5 Exploited Directory Traversal with spring-cloud-config-server 95.6%
  • CVE-2020-5428 Medium 5.1 Possibility of SQL Injection in Spring Cloud Task Execution Sorting Query 0.5%
  • CVE-2020-5427 Medium 5.7 Possibility of SQL Injection in Spring Cloud Data Flow Task Execution Sorting Query 1.1%
  • CVE-2020-5421 High 8.7 RFD Protection Bypass via jsessionid 11.6%
  • CVE-2020-5412 Unrated Hystrix Dashboard Proxy In spring-cloud-netflix-hystrix-dashboard 10.2%
  • CVE-2020-5413 Unrated Kryo Configuration Allows Code Execution with Unknown "Serialization Gadgets" 4.4%
  • CVE-2020-5411 Unrated Jackson Configuration Allows Code Execution with Unknown "Serialization Gadgets" 1.7%
  • CVE-2020-5408 Unrated Dictionary attack with Spring Security queryable text encryptor 1.6%
  • CVE-2020-5407 Unrated Signature Wrapping Vulnerability with spring-security-saml2-service-provider 1.2%
  • CVE-2020-5405 Unrated Directory Traversal with spring-cloud-config-server 68.5%