Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
pivotal spring security oauth vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv2
CVE-2018-1260
Spring Security OAuth, versions 2.3 before 2.3.3, 2.2 before 2.2.2, 2.1 before 2.1.2, 2.0 before 2.0.15 and older unsupported versions contains a remote code execution vulnerability. A malicious user or attacker can craft an authorization request to the authorization endpoint tha...
Pivotal Software Spring Security Oauth
6.8
CVSSv2
CVE-2018-15758
Spring Security OAuth, versions 2.3 before 2.3.4, and 2.2 before 2.2.3, and 2.1 before 2.1.3, and 2.0 before 2.0.16, and older unsupported versions could be susceptible to a privilege escalation under certain conditions. A malicious user or attacker can craft a request to the app...
Pivotal Software Spring Security Oauth
6.5
CVSSv2
CVE-2016-4977
When processing authorization requests using the whitelabel views in Spring Security OAuth 2.0.0 to 2.0.9 and 1.0.0 to 1.0.5, the response_type parameter value was executed as Spring SpEL which enabled a malicious user to trigger remote code execution via the crafting of the valu...
Pivotal Spring Security Oauth 2.0.4
Pivotal Spring Security Oauth 2.0.3
Pivotal Spring Security Oauth 1.0.2
Pivotal Spring Security Oauth 1.0.4
Pivotal Spring Security Oauth 2.0.6
Pivotal Spring Security Oauth 2.0.5
Pivotal Spring Security Oauth 1.0.3
Pivotal Spring Security Oauth 2.0.9
Pivotal Spring Security Oauth 1.0.1
Pivotal Spring Security Oauth 2.0.0
Pivotal Spring Security Oauth 1.0.5
Pivotal Spring Security Oauth 2.0.2
Pivotal Spring Security Oauth 2.0.8
Pivotal Spring Security Oauth 2.0.7
Pivotal Spring Security Oauth 2.0.1
Pivotal Spring Security Oauth 1.0.0
1 Github repository
6.4
CVSSv2
CVE-2019-3778
Spring Security OAuth, versions 2.3 before 2.3.5, and 2.2 before 2.2.4, and 2.1 before 2.1.4, and 2.0 before 2.0.17, and older unsupported versions could be susceptible to an open redirector attack that can leak an authorization code. A malicious user or attacker can craft a requ...
Pivotal Software Spring Security Oauth
Oracle Banking Corporate Lending 14.1.0
Oracle Banking Corporate Lending 14.3.0
Oracle Banking Corporate Lending 14.4.0
1 EDB exploit
2 Github repositories
5.8
CVSSv2
CVE-2019-11269
Spring Security OAuth versions 2.3 before 2.3.6, 2.2 before 2.2.5, 2.1 before 2.1.5, and 2.0 before 2.0.18, as well as older unsupported versions could be susceptible to an open redirector attack that can leak an authorization code. A malicious user or attacker can craft a reques...
Pivotal Software Spring Security Oauth
Oracle Banking Corporate Lending 14.1.0
Oracle Banking Corporate Lending 14.3.0
Oracle Banking Corporate Lending 14.4.0
1 EDB exploit
1 Github repository
4
CVSSv2
CVE-2022-22969
<Issue Description> Spring Security OAuth versions 2.5.x before 2.5.2 and older unsupported versions are susceptible to a Denial-of-Service (DoS) attack via the initiation of the Authorization Request in an OAuth 2.0 Client application. A malicious user or attacker can send...
Pivotal Spring Security Oauth
Oracle Communications Design Studio 7.4.2
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-29895
blind SQL injection
CVE-2024-5064
CVE-2023-52677
CVE-2023-52682
CVE-2024-30051
CVE-2024-35849
remote attackers
remote
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started