Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

vmware spring framework 3.0.7 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2013-7315
The Spring MVC in Spring Framework prior to 3.2.4 and 4.0.0.M1 up to and including 4.0.0.M2 does not disable external entity resolution for the StAX XMLInputFactory, which allows context-dependent malicious users to read arbitrary files, cause a denial of service, and conduct CSR...
Vmware Spring Framework 3.1.4Vmware Spring Framework 3.1.3Vmware Spring Framework 4.0.0Springsource Spring Framework 3.0.5Springsource Spring Framework 3.0.0Vmware Spring FrameworkVmware Spring Framework 3.2.2Vmware Spring Framework 3.1.0Vmware Spring Framework 3.0.7Springsource Spring Framework 3.0.2Springsource Spring Framework 3.0.1Springsource Spring Framework 3.0.0.m2Vmware Spring Framework 3.2.1Vmware Spring Framework 3.2.0Vmware Spring Framework 3.0.6Springsource Spring Framework 3.0.0.m1Vmware Spring Framework 3.1.2Vmware Spring Framework 3.1.1Springsource Spring Framework 3.0.4Springsource Spring Framework 3.0.3
8.8
CVSSv3
CVE-2014-0225
When processing user provided XML documents, the Spring Framework 4.0.0 to 4.0.4, 3.0.0 to 3.2.8, and possibly earlier unsupported versions did not disable by default the resolution of URI references in a DTD declaration. This enabled an XXE attack.
Vmware Spring Framework 3.1.3Vmware Spring Framework 3.1.4Pivotal Software Spring Framework 3.0.0Vmware Spring Framework 3.0.1Vmware Spring Framework 3.2.1Pivotal Software Spring Framework 3.2.0Pivotal Software Spring Framework 4.0.0Vmware Spring Framework 4.0.1Vmware Spring Framework 3.1.0Vmware Spring Framework 4.0.0Vmware Spring Framework 3.1.1Vmware Spring Framework 3.0.3Vmware Spring Framework 3.0.5Vmware Spring Framework 3.2.4Vmware Spring Framework 3.2.2Vmware Spring Framework 4.0.2Vmware Spring Framework 4.0.4Vmware Spring Framework 3.2.0Vmware Spring Framework 3.0.7Vmware Spring Framework 3.2.8Vmware Spring Framework 3.2.6Vmware Spring Framework 3.2.7
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook