Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • M
Incorrect AuthorizationCVE-2025-22223
Affects org.springframework.security:spring-security-core | Versions [6.4.0,6.4.4)
Has fix
MavenPublished 20 Mar 2025
  • M
Authorization BypassCVE-2024-38827
Affects org.springframework.security:spring-security-core | Versions [,5.7.14)[5.8.0,5.8.16)[6.2.0,6.2.8)[6.3.0,6.3.5)
Has fix
MavenPublished 20 Nov 2024
  • H
Improper Access ControlCVE-2024-22257
Affects org.springframework.security:spring-security-core | Versions [,5.7.12)[5.8.0,5.8.11)[6.0.0,6.0.10)[6.1.0,6.1.8)[6.2.0,6.2.3)
Has fix
MavenPublished 18 Mar 2024
  • H
Authentication BypassCVE-2024-22234
Affects org.springframework.security:spring-security-core | Versions [6.1.0,6.1.7)[6.2.0,6.2.2)
Has fix
MavenPublished 20 Feb 2024
  • M
Integer Overflow or WraparoundCVE-2022-22976
Affects org.springframework.security:spring-security-core | Versions [3.1.0.RELEASE,5.4.11)
Has fix
MavenPublished 18 May 2022
  • M
Privilege EscalationCVE-2021-22112
Affects org.springframework.security:spring-security-core | Versions [5.4.0, 5.4.4)[5.3.0.RELEASE, 5.3.8.RELEASE)[,5.2.9.RELEASE)
Has fix
MavenPublished 21 Feb 2021
  • M
Cryptographic WeaknessCVE-2020-5408
Affects org.springframework.security:spring-security-core | Versions [5.3.0.RELEASE, 5.3.2.RELEASE)[5.2.0.RELEASE, 5.2.4.RELEASE)[5.1.0.RELEASE, 5.1.10.RELEASE)[5.0.0.RELEASE, 5.0.16.RELEASE)[4.2.0.RELEASE, 4.2.16.RELEASE)
Has fix
MavenPublished 22 May 2020
  • H
Improper AuthenticationCVE-2019-11272
Affects org.springframework.security:spring-security-core | Versions [4.2.0.RELEASE,4.2.13.RELEASE)
Has fix
MavenPublished 21 Jun 2019
  • L
Insecure RandomnessCVE-2019-3795
Affects org.springframework.security:spring-security-core | Versions [4.2.0.RELEASE, 4.2.12.RELEASE)[5.0.0.RELEASE, 5.0.12.RELEASE)[5.1.0.RELEASE, 5.1.5.RELEASE)
Has fix
MavenPublished 5 Apr 2019
  • H
Deserialization of Untrusted DataCVE-2017-4995
Affects org.springframework.security:spring-security-core | Versions [4.2.0.RELEASE,4.2.3.RELEASE)
Has fix
MavenPublished 20 Sept 2017
  • H
Authentication BypassCVE-2014-0097
Affects org.springframework.security:spring-security-core | Versions [3.2.0.RELEASE,3.2.2.RELEASE)[3.1.0.RELEASE,3.1.6.RELEASE)
Has fix
MavenPublished 25 Dec 2016
  • M
Information ExposureCVE-2012-5055
Affects org.springframework.security:spring-security-core | Versions [,2.0.8.RELEASE)[3.0.0.RELEASE,3.0.8.RELEASE)[3.1.0.RELEASE,3.1.3.RELEASE)
Has fix
MavenPublished 25 Dec 2016
  • M
Access Restriction BypassCVE-2010-3700
Affects org.springframework.security:spring-security-core | Versions [2.0.0.RELEASE,2.0.6.RELEASE)[3.0.0..RELEASE,3.0.4.RELEASE)
Has fix
MavenPublished 10 Jun 2015
  • M
Improper AuthenticationCVE-2011-2731
Affects org.springframework.security:spring-security-core | Versions [,2.0.7.RELEASE)[3.0.0.RELEASE,3.0.6.RELEASE)
Has fix
MavenPublished 8 Sept 2014
  • M
Arbitrary Code ExecutionCVE-2011-2732
Affects org.springframework.security:spring-security-core | Versions [2.0.0,2.0.7.RELEASE)[3.0.0.RELEASE,3.0.6.RELEASE)
Has fix
MavenPublished 8 Sept 2014
  • M
Access Restriction BypassCVE-2011-2894
Affects org.springframework.security:spring-security-core | Versions [2.0.0.RELEASE,2.0.7.RELEASE)[3.0.0.RELEASE,3.0.6.RELEASE)
Has fix
MavenPublished 8 Sept 2014
  • H
Generation of Predictable IV with CBC ModeCVE-2026-47842
Affects org.springframework.security:spring-security-crypto | Versions [5.7.0, 7.0.7)[7.1.0, 7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • M
Timing AttackCVE-2025-22234
Affects org.springframework.security:spring-security-crypto | Versions [6.3.8,6.3.9)[6.4.4,6.4.5)
Has fix
MavenPublished 23 Apr 2025
  • C
Authentication Bypass by Primary WeaknessCVE-2025-22228
Affects org.springframework.security:spring-security-crypto | Versions [,6.3.8)[6.4.0,6.4.4)
Has fix
MavenPublished 20 Mar 2025
  • M
Authorization BypassCVE-2024-38827
Affects org.springframework.security:spring-security-crypto | Versions [,5.7.14)[5.8.0,5.8.16)[6.2.0,6.2.8)[6.3.0,6.3.5)
Has fix
MavenPublished 20 Nov 2024
  • M
Integer Overflow or WraparoundCVE-2022-22976
Affects org.springframework.security:spring-security-crypto | Versions [,5.5.7)[5.6.0,5.6.4)
Has fix
MavenPublished 18 May 2022
  • M
Cryptographic WeaknessCVE-2020-5408
Affects org.springframework.security:spring-security-crypto | Versions [5.3.0.RELEASE, 5.3.2.RELEASE)[5.2.0.RELEASE, 5.2.4.RELEASE)[5.1.0.RELEASE, 5.1.10.RELEASE)[5.0.0.RELEASE, 5.0.16.RELEASE)[4.2.0.RELEASE, 4.2.16.RELEASE)
Has fix
MavenPublished 22 May 2020
  • C
Binding to an Unrestricted IP AddressCVE-2026-59270
Affects org.springframework.security:spring-security-ldap | Versions [5.7.0,7.0.7)[7.1.0,7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • M
Authorization BypassCVE-2024-38827
Affects org.springframework.security:spring-security-ldap | Versions [,5.7.14)[5.8.0,5.8.16)[6.2.0,6.2.8)[6.3.0,6.3.5)
Has fix
MavenPublished 20 Nov 2024
  • M
Authentication Bypass
Affects org.springframework.security:spring-security-ldap | Versions [,4.2.9.RELEASE)[5.0.0.RELEASE, 5.0.9.RELEASE)[5.1.0.RELEASE, 5.1.1.RELEASE)
Has fix
MavenPublished 6 Mar 2018
  • H
Authentication BypassCVE-2014-0097
Affects org.springframework.security:spring-security-ldap | Versions [3.2.0.RELEASE,3.2.2.RELEASE)[3.1.0.RELEASE,3.1.6.RELEASE)
Has fix
MavenPublished 25 Dec 2016
  • M
Open RedirectCVE-2026-59355
Affects org.springframework.security:spring-security-oauth2-authorization-server | Versions [1.5.0,1.5.8)
Has fix
MavenPublished 27 Aug 2026
  • M
Improper Validation of Syntactic Correctness of InputCVE-2026-59354
Affects org.springframework.security:spring-security-oauth2-authorization-server | Versions [7.0.0,7.0.5)
Has fix
MavenPublished 27 Aug 2026
  • H
Cross-site Scripting (XSS)CVE-2026-47877
Affects org.springframework.security:spring-security-oauth2-authorization-server | Versions [7.0.0,7.0.7)[7.1.0,7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • H
Cross-site Scripting (XSS)CVE-2026-59316
Affects org.springframework.security:spring-security-oauth2-authorization-server | Versions [1.4.0, 1.4.12)[1.5.0, 1.5.9)
Has fix
MavenPublished 26 Aug 2026