Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
- M
Multipart Content PollutionCVE-2018-1272
Affects org.springframework:spring-webmvc | Versions [4.3.0.RELEASE, 4.3.14.RELEASE)[5.0.0.RELEASE, 5.0.5.RELEASE)
Has fix
MavenPublished 9 Apr 2018
- M
Directory TraversalCVE-2018-1271
Affects org.springframework:spring-webmvc | Versions [,4.3.15.RELEASE)[5.0.0.RELEASE,5.0.5.RELEASE)
Has fix
MavenPublished 9 Apr 2018
Affects org.springframework:spring-webmvc | Versions [,3.0.6.RELEASE)
Has fix
MavenPublished 20 Sept 2017
- H
Directory TraversalCVE-2016-9878
Affects org.springframework:spring-webmvc | Versions [1.2.1,3.2.18.RELEASE)[4.2.0.RELEASE,4.2.9.RELEASE)[4.3.0.RELEASE,4.3.5.RELEASE)
Has fix
MavenPublished 28 Dec 2016
- M
Directory TraversalCVE-2014-3625
Affects org.springframework:spring-webmvc | Versions [3.2.0.RELEASE,3.2.12.RELEASE)[4.0.0.RELEASE,4.0.8.RELEASE)[4.1.0.RELEASE,4.1.2.RELEASE)
Has fix
MavenPublished 25 Dec 2016
- M
Cross-site Scripting (XSS)CVE-2014-1904
Affects org.springframework:spring-webmvc | Versions [3.0.0.RELEASE,3.2.8.RELEASE)[4.0.0.RELEASE,4.0.2.RELEASE)
Has fix
MavenPublished 25 Dec 2016
- M
Information ExposureCVE-2018-11040
Affects org.springframework:spring-webmvc | Versions [4.3.0.RELEASE,4.3.18.RELEASE)[5.0.0.RELEASE,5.0.7.RELEASE)
Has fix
MavenPublished 25 Dec 2016
- H
Authentication BypassCVE-2016-5007
Affects org.springframework:spring-webmvc | Versions [3.2.0.RELEASE,4.3.1.RELEASE)
Has fix
MavenPublished 11 Jul 2016
- M
Generation of Predictable Numbers or IdentifiersCVE-2026-41838
Affects org.springframework:spring-websocket | Versions [5.3.0,6.0.0)[6.1.0-M1,6.2.19)[7.0.0-M1,7.0.8)
Has fix
MavenPublished 9 Jun 2026
- M
Cross-site Request Forgery (CSRF)CVE-2025-41254
Affects org.springframework:spring-websocket | Versions [,6.2.12)
Has fix
MavenPublished 17 Oct 2025
- L
Improper Handling of Case SensitivityCVE-2024-38820
Affects org.springframework:spring-websocket | Versions [,6.1.14)
Has fix
MavenPublished 18 Oct 2024
- M
Insufficiently Random Session IDCVE-2015-0201
Affects org.springframework:spring-websocket | Versions [4.1.0.RELEASE,4.1.5.RELEASE)
Has fix
MavenPublished 25 Dec 2016
- H
Deserialization of Untrusted DataCVE-2026-41862
Affects org.springframework.statemachine:spring-statemachine-core | Versions [,4.0.2)
Has fix
MavenPublished 28 Jul 2026
- M
Insertion of Sensitive Information into Log FileCVE-2023-20859
Affects org.springframework.vault:spring-vault-core | Versions [,2.3.3)[3.0.0,3.0.2)
Has fix
MavenPublished 24 Mar 2023
- M
Cross-site Scripting (XSS)CVE-2026-40986
Affects org.springframework.webflow:spring-js-resources | Versions [,3.0.2)[4.0.0,4.0.1)
Has fix
MavenPublished 12 Jun 2026
- H
Affects org.springframework.webflow:spring-webflow | Versions [,3.0.2)[4.0.0-RC1,4.0.1)
Has fix
MavenPublished 12 Jun 2026
- M
Insecure DefaultsCVE-2017-8039
Affects org.springframework.webflow:spring-webflow | Versions [,2.4.6.RELEASE)
Has fix
MavenPublished 28 Nov 2017
- M
Insecure DefaultsCVE-2017-4971
Affects org.springframework.webflow:spring-webflow | Versions [,2.4.5.RELEASE)
Has fix
MavenPublished 7 Jun 2017
- H
Server-side Request Forgery (SSRF)CVE-2026-40999
Affects org.springframework.ws:spring-ws-core | Versions [,4.1.4)[5.0.0-M1,5.0.2)
Has fix
MavenPublished 12 Jun 2026
- C
XML External Entity (XXE) InjectionCVE-2019-3773
Affects org.springframework.ws:spring-ws-core | Versions [,2.4.4.RELEASE)[3.0.0.RELEASE,3.0.6.RELEASE)
Has fix
MavenPublished 16 Jan 2019
- M
Replay AttackCVE-2026-41000
Affects org.springframework.ws:spring-ws-security | Versions [,4.1.4)[5.0.0-M1,5.0.2)
Has fix
MavenPublished 12 Jun 2026
- L
Incorrect Implementation of Authentication AlgorithmCVE-2026-40995
Affects org.springframework.ws:spring-ws-security | Versions [,4.1.4)[5.0.0-M1,5.0.2)
Has fix
MavenPublished 12 Jun 2026
- H
Insecure DefaultsCVE-2026-40994
Affects org.springframework.ws:spring-ws-security | Versions [,4.1.4)[5.0.0-M1,5.0.2)
Has fix
MavenPublished 12 Jun 2026
- M
Information ExposureCVE-2026-40997
Affects org.springframework.ws:spring-ws-security | Versions [,4.1.4)[5.0.0-M1,5.0.2)
Has fix
MavenPublished 12 Jun 2026
- M
Use of RSA Algorithm without OAEPCVE-2026-40996
Affects org.springframework.ws:spring-ws-security | Versions [,4.1.4)[5.0.0-M1,5.0.2)
Has fix
MavenPublished 12 Jun 2026
- H
XML External Entity (XXE) InjectionCVE-2026-40998
Affects org.springframework.ws:spring-xml | Versions [,4.1.4)[5.0.0-M1,5.0.2)
Has fix
MavenPublished 12 Jun 2026
- C
XML External Entity (XXE) InjectionCVE-2019-3773
Affects org.springframework.ws:spring-xml | Versions [,2.4.4.RELEASE)[3.0.0.RELEASE,3.0.6.RELEASE)
Has fix
MavenPublished 16 Jan 2019
- H
Directory TraversalCVE-2026-22737
Affects springframework:spring-webmvc | Versions [0,]
Has fix
MavenPublished 20 Mar 2026