Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

vmware spring framework 4.0.1 vulnerabilities and exploits

(subscribe to this query)
8.8
CVSSv3
CVE-2014-0225
When processing user provided XML documents, the Spring Framework 4.0.0 to 4.0.4, 3.0.0 to 3.2.8, and possibly earlier unsupported versions did not disable by default the resolution of URI references in a DTD declaration. This enabled an XXE attack.
Vmware Spring Framework 3.1.3Vmware Spring Framework 3.1.4Pivotal Software Spring Framework 3.0.0Vmware Spring Framework 3.0.1Vmware Spring Framework 3.2.1Pivotal Software Spring Framework 3.2.0Pivotal Software Spring Framework 4.0.0Vmware Spring Framework 4.0.1Vmware Spring Framework 3.1.0Vmware Spring Framework 4.0.0Vmware Spring Framework 3.1.1Vmware Spring Framework 3.0.3Vmware Spring Framework 3.0.5Vmware Spring Framework 3.2.4Vmware Spring Framework 3.2.2Vmware Spring Framework 4.0.2Vmware Spring Framework 4.0.4Vmware Spring Framework 3.2.0Vmware Spring Framework 3.0.7Vmware Spring Framework 3.2.8Vmware Spring Framework 3.2.6Vmware Spring Framework 3.2.7
9.6
CVSSv3
CVE-2015-5211
Under some situations, the Spring Framework 4.2.0 to 4.2.1, 4.0.0 to 4.1.7, 3.2.0 to 3.2.14 and older unsupported versions is vulnerable to a Reflected File Download (RFD) attack. The attack involves a malicious user crafting a URL with a batch script extension that results in th...
Vmware Spring Framework 3.2.2Vmware Spring Framework 3.2.1Vmware Spring Framework 3.2.8Vmware Spring Framework 3.2.7Vmware Spring Framework 3.2.10Vmware Spring Framework 3.2.9Vmware Spring Framework 3.2.4Vmware Spring Framework 3.2.3Vmware Spring Framework 3.2.6Vmware Spring Framework 3.2.5Vmware Spring Framework 4.0.1Vmware Spring Framework 4.0.6Vmware Spring Framework 4.0.8Vmware Spring Framework 3.2.14Vmware Spring Framework 4.2.1Vmware Spring Framework 4.1.6Vmware Spring Framework 4.0.2Vmware Spring Framework 4.0.3Vmware Spring Framework 4.0.4Vmware Spring Framework 4.0.5Vmware Spring Framework 3.2.11Vmware Spring Framework 3.2.12
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook