Spring Framework, versions 5.0.x before 5.0.7 and 4.3.x before 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON with Padding) through AbstractJsonpResponseBodyAdvice for REST controllers and MappingJackson2JsonView for browser requests. Both are not enabled by default in Spring Framework nor Spring Boot, however, when MappingJackson2JsonView is configured in an application, JSONP support is automatically ready to use through the "jsonp" and "callback" JSONP parameters, enabling cross-domain requests.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
vmware spring framework |
||
oracle flexcube private banking 2.2.0.1 |
||
oracle retail xstore point of service 7.1 |
||
oracle application testing suite 12.5.0.3 |
||
oracle hospitality guest access 4.2.0 |
||
oracle hospitality guest access 4.2.1 |
||
oracle weblogic server 12.2.1.3.0 |
||
oracle enterprise manager ops center 12.3.3 |
||
oracle endeca information discovery integrator 3.2.0 |
||
oracle endeca information discovery integrator 3.1.0 |
||
oracle agile product lifecycle management 9.3.3 |
||
oracle agile product lifecycle management 9.3.4 |
||
oracle agile product lifecycle management 9.3.5 |
||
oracle application testing suite 13.1.0.1 |
||
oracle application testing suite 13.2.0.1 |
||
oracle application testing suite 13.3.0.1 |
||
oracle communications online mediation controller 6.1 |
||
oracle communications services gatekeeper |
||
oracle healthcare master person index 3.0 |
||
oracle healthcare master person index 4.0 |
||
oracle insurance rules palette 10.0 |
||
oracle insurance rules palette 10.2 |
||
oracle micros lucas 2.9.5 |
||
oracle retail clearance optimization engine 14.0.5 |
||
oracle retail customer insights 15.0 |
||
oracle retail customer insights 16.0 |
||
oracle retail predictive application server 16.0 |
||
oracle utilities network management system 1.12.0.3 |
||
oracle communications network integrity |
||
oracle communications unified inventory management 7.3.2 |
||
oracle communications unified inventory management 7.3.4 |
||
oracle communications unified inventory management 7.3.5 |
||
oracle communications unified inventory management 7.4.0 |
||
oracle enterprise manager 13.2 |
||
oracle flexcube private banking 2.0.0.0 |
||
oracle flexcube private banking 12.0.1.0 |
||
oracle flexcube private banking 12.0.3.0 |
||
oracle flexcube private banking 12.1.0.0 |
||
oracle insurance calculation engine |
||
oracle mysql enterprise monitor |
||
oracle product lifecycle management 9.3.6 |
||
oracle retail advanced inventory planning 15.0 |
||
oracle retail markdown optimization 13.4.4 |
||
oracle retail predictive application server 14.0.3.26 |
||
oracle retail predictive application server 14.1.3.37 |
||
oracle retail predictive application server 15.0.3.100 |
||
oracle retail service backbone 16.0.1 |
||
debian debian linux 9.0 |
Vulmon