CVE-2013-6429

🗓️ 26 Jan 2014 11:00:00Reported by redhatType

cve

cve🔗 web.nvd.nist.gov👁 148 Views

Vulnerability in SourceHttpMessageConverter in Spring Framework

Reporter	Title	Published	Views	Family All 39
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found on thirdparty libraries used by IBM® MobileFirst Platform	26 Jan 202317:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium Big Data Intelligence (SonarG) is vulnerable to using Components with Known Vulnerabilities	16 Jun 201822:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Directory Integrator is affected by multiple security vulnerabilities	22 Jun 202316:30	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Tomcat affect IBM SDN VE (CVE- 2011-4905, CVE-2013-0248,CVE-2014-0050,CVE-2014-3577,CVE-2014-0054,CVE- 2013-7315,CVE-2013-6429,CVE-2014-0119,CVE-2014-0099,CVE-2014-1904)	18 Jun 201801:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to multiple security vulnerabilities	18 Feb 201914:10	–	ibm
Check Point Advisories	Multiple Products XML Public External Entity Information Disclosure (CVE-2013-3617; CVE-2013-4152; CVE-2013-6429; CVE-2014-0002; CVE-2014-0423)	29 Sep 201300:00	–	checkpoint_advisories
Check Point Advisories	Multiple Products XML System External Entity Information Disclosure (CVE-2013-3617; CVE-2013-4152; CVE-2013-6429; CVE-2014-0002; CVE-2014-0054; CVE-2014-0423)	29 Sep 201300:00	–	checkpoint_advisories
Cvelist	CVE-2013-6429	26 Jan 201411:00	–	cvelist
Debian	[SECURITY] [DSA 2857-1] libspring-java security update	8 Feb 201414:41	–	debian
Debian CVE	CVE-2013-6429	26 Jan 201411:00	–	debiancve

NVD

Node

pivotal_software spring_frameworkRange3.0.0–3.2.4

OR

vmware spring_frameworkMatch4.0.0milestone1

OR

vmware spring_frameworkMatch4.0.0milestone2

OR

vmware spring_frameworkMatch4.0.0rc1

Source	Link
secunia	www.secunia.com/advisories/57915
h20566	www.h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay
securityfocus	www.securityfocus.com/bid/64947
rhn	www.rhn.redhat.com/errata/RHSA-2014-0400.html
jira	www.jira.springsource.org/browse/SPR-11078
securityfocus	www.securityfocus.com/archive/1/530770/100/0/threaded
gopivotal	www.gopivotal.com/security/cve-2013-6429

29 Apr 2026 01:13Current

5.7Medium risk

Vulners AI Score5.7

CVSS 26.8

EPSS0.38725

CWE-611 CWE-352

cve-2013-6429 sourcehttpmessageconverter spring mvc spring framework xxe xml external entity denial of service csrf nvd