Skip to content
Noroxi

springsource records

10 published records for vendor springsource.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
60%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    10 records
    • CVE-2014-0054
      54Plan

      The Jaxb2RootElementHttpMessageConverter in Spring MVC in Spring Framework before 3.2.8 and 4.0.0 before 4.0.2 does not disable external ent

      MediumCVSS 6.8No exploitEPSS 91%

      springsource · spring frameworkApr 17, 2014

    • CVE-2010-1622
      40Plan

      SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote attackers to execute a

      MediumCVSS 6.0Proof of conceptEPSS 52%

      springsource · spring frameworkJun 21, 2010

    • CVE-2013-4152
      35Monitor

      The Spring OXM wrapper in Spring Framework before 3.2.4 and 4.0.0.M1, when using the JAXB marshaller, does not disable entity resolution, wh

      MediumCVSS 6.8No exploitEPSS 25%

      springsource · spring frameworkJan 23, 2014

    • CVE-2011-2730
      34Monitor

      VMware SpringSource Spring Framework before 2.5.6.SEC03, 2.5.7.SR023, and 3.x before 3.0.6, when a container supports Expression Language (E

      HighCVSS 7.5No exploitEPSS 11%

      springsource · spring frameworkDec 5, 2012

    • CVE-2013-7315
      29Monitor

      The Spring MVC in Spring Framework before 3.2.4 and 4.0.0.M1 through 4.0.0.M2 does not disable external entity resolution for the StAX XMLIn

      MediumCVSS 6.8No exploitEPSS 5%

      springsource · spring frameworkJan 23, 2014

    • CVE-2009-1190
      21Monitor

      Algorithmic complexity vulnerability in the java.util.regex.Pattern.compile method in Sun Java Development Kit (JDK) before 1.6, when used w

      MediumCVSS 5.0No exploitEPSS 2%

      sun · jdkApr 27, 2009

    • CVE-2012-1833
      20Monitor

      VMware SpringSource Grails before 1.3.8, and 2.x before 2.0.2, does not properly restrict data binding, which might allow remote attackers t

      MediumCVSS 5.0No exploitEPSS 1%

      springsource · grailsSep 28, 2012

    • CVE-2009-2897
      18Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in hq/web/common/GenericError.jsp in the generic exception handler in the web interface

      MediumCVSS 4.3No exploitEPSS 2%

      springsource · application management suiteOct 13, 2009

    • CVE-2009-2907
      17Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in SpringSource tc Server 6.0.20.B and earlier, Application Management Suite (AMS) befor

      MediumCVSS 4.3Proof of conceptEPSS 1%

      springsource · application management suiteMar 24, 2010

    • CVE-2009-2898
      15Monitor

      Cross-site scripting (XSS) vulnerability in the Alerts list feature in the web interface in SpringSource Hyperic HQ 3.2.x before 3.2.6.1, 4.

      LowCVSS 3.5Proof of conceptEPSS 1%

      springsource · application management suiteOct 13, 2009