Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

vmware spring framework 3.2.11 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3
CVE-2016-9878
An issue exists in Pivotal Spring Framework prior to 3.2.18, 4.2.x prior to 4.2.9, and 4.3.x prior to 4.3.5. Paths provided to the ResourceServlet were not properly sanitized and as a result exposed to directory traversal attacks.
Vmware Spring Framework 4.3.1Pivotal Software Spring Framework 4.3.0Vmware Spring Framework 4.2.8Vmware Spring Framework 4.2.1Pivotal Software Spring Framework 4.2.0Vmware Spring Framework 3.2.11Vmware Spring Framework 3.2.10Vmware Spring Framework 3.2.2Vmware Spring Framework 3.2.1Vmware Spring Framework 4.2.7Vmware Spring Framework 4.2.6Vmware Spring Framework 3.2.17Vmware Spring Framework 3.2.16Vmware Spring Framework 3.2.9Vmware Spring Framework 3.2.8Pivotal Software Spring FrameworkVmware Spring Framework 4.3.4Vmware Spring Framework 4.2.5Vmware Spring Framework 4.2.4Vmware Spring Framework 3.2.15Vmware Spring Framework 3.2.14Vmware Spring Framework 3.2.7
9.6
CVSSv3
CVE-2015-5211
Under some situations, the Spring Framework 4.2.0 to 4.2.1, 4.0.0 to 4.1.7, 3.2.0 to 3.2.14 and older unsupported versions is vulnerable to a Reflected File Download (RFD) attack. The attack involves a malicious user crafting a URL with a batch script extension that results in th...
Vmware Spring Framework 3.2.2Vmware Spring Framework 3.2.1Vmware Spring Framework 3.2.8Vmware Spring Framework 3.2.7Vmware Spring Framework 3.2.10Vmware Spring Framework 3.2.9Vmware Spring Framework 3.2.4Vmware Spring Framework 3.2.3Vmware Spring Framework 3.2.6Vmware Spring Framework 3.2.5Vmware Spring Framework 4.0.1Vmware Spring Framework 4.0.6Vmware Spring Framework 4.0.8Vmware Spring Framework 3.2.14Vmware Spring Framework 4.2.1Vmware Spring Framework 4.1.6Vmware Spring Framework 4.0.2Vmware Spring Framework 4.0.3Vmware Spring Framework 4.0.4Vmware Spring Framework 4.0.5Vmware Spring Framework 3.2.11Vmware Spring Framework 3.2.12
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook