JVN#15317878: Spring Security OAuth (spring-security-oauth2) vulnerable to denial-of-service (DoS)

🗓️ 20 May 2022 00:00:00Reported by Japan Vulnerability NotesType

jvn

jvn🔗 jvn.jp👁 41 Views

Spring Security OAuth denial-of-service vulnerability, update to latest versio

Reporter	Title	Published	Views	Family All 57
IBM Security Bulletins	Security Bulletin: Spring Security OAuth Affects IBM Partner Engagement Manager (CVE-2022-22969)	22 Sep 202219:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities including remote code execution in Apache Log4j 1.x	3 Aug 202216:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	11 Oct 202118:12	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Spring Security affects IBM Process Mining . CVE-2021-22119	27 Jun 202311:05	–	ibm
ATTACKERKB	CVE-2022-22969	21 Apr 202219:15	–	attackerkb
BDU FSTEC	The vulnerability of the Java framework for securing industrial applications using Spring Security, related to uncontrolled resource consumption, allows attackers to cause service failures.	6 Jul 202100:00	–	bdu_fstec
Circl	CVE-2021-22119	2 Nov 202115:21	–	circl
Circl	CVE-2022-22969	21 Apr 202222:27	–	circl
CNNVD	VMware Spring Security 安全漏洞	28 Jun 202100:00	–	cnnvd
CNNVD	Pivotal Spring Security OAuth 资源管理错误漏洞	21 Apr 202200:00	–	cnnvd

20 May 2022 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 25

CVSS 3.17.5

EPSS0.04895

spring security oauth denial-of-service update vulnerability cwe-400 vmware cve-2021-22119