K29042031: Multiple Spring Framework vulnerabilities

🗓️ 21 Feb 2023 19:57:21Reported by f5Type

f5🔗 my.f5.com👁 288 Views

Multiple Spring Framework vulnerabilities, including remote code execution and denial of service attacks, affect versions 4.3.15, 4.3.16, 5.0.5, 1.13.10, 2.0.5, and older unsupported versions. Mitigate with BIG-IP ASM system

Reporter	Title	Published	Views	Family All 168
Gitee	Exploit for Code Injection in Pivotal_Software Spring_Data_Commons	11 Apr 202111:34	–	gitee
Gitee	Exploit for Code Injection in Pivotal_Software Spring_Data_Commons	15 Sep 202123:52	–	gitee
0day.today	Pivotal Spring Java Framework < 5.0 - Remote Code Execution Exploit	29 May 201800:00	–	zdt
IBM Security Bulletins	Security Bulletin: Vulnerabilities in hoek, Bouncy Castle Inc, Spring Framework, golang, Apache Commons, semver and Google Guava might affect IBM Storage Defender Copy Data Management	10 Apr 202614:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Controller has addressed multiple vulnerabilities	2 Dec 202219:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Guardium Data Encryption (GDE)	12 Jan 202114:42	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found on thirdparty libraries used by IBM® MobileFirst Platform	26 Jan 202317:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Directory Integrator is affected by multiple security vulnerabilities	22 Jun 202316:30	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities identified in IBM StoredIQ	20 Feb 202012:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to multiple security vulnerabilities	18 Feb 201914:10	–	ibm

21 Feb 2023 19:57Current

8.8High risk

Vulners AI Score8.8

CVSS 27.5

CVSS 3.19.8

EPSS0.94284

SSVC