Vulnerabilities in Spring by VMware

10 results
Vexday analysis

Spring by VMware apresenta 10 vulnerabilidades catalogadas, com 1 sob ataque ativo confirmado (KEV), nenhuma crítica por CVSS. A fraqueza dominante é de validação de caminho (CWE-23), e não há publicações recentes nos últimos 90 dias, indicando que o risco atual é estável e concentrado em uma vulnerabilidade já explorada em campo.

CVE-2020-5410HIGHDirectory Traversal with spring-cloud-config-serverEPSS 95.6%KEVCVE-2020-5405—Directory Traversal with spring-cloud-config-serverEPSS 68.8%CVE-2020-5421HIGHRFD Protection Bypass via jsessionidEPSS 10.7%CVE-2020-5412—Hystrix Dashboard Proxy In spring-cloud-netflix-hystrix-dashboardEPSS 10.2%CVE-2020-5413—Kryo Configuration Allows Code Execution with Unknown "Serialization Gadgets"EPSS 4.4%CVE-2020-5411—Jackson Configuration Allows Code Execution with Unknown "Serialization Gadgets"EPSS 1.9%CVE-2020-5408—Dictionary attack with Spring Security queryable text encryptorEPSS 1.6%CVE-2020-5407—Signature Wrapping Vulnerability with spring-security-saml2-service-providerEPSS 1.2%CVE-2020-5427MEDIUMPossibility of SQL Injection in Spring Cloud Data Flow Task Execution Sorting QueryEPSS 1.1%CVE-2020-5428MEDIUMPossibility of SQL Injection in Spring Cloud Task Execution Sorting QueryEPSS 0.5%