Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:DLA-2635-1
HistoryApr 23, 2021 - 12:00 a.m.

libspring-java - security update

2021-04-2300:00:00
Google
osv.dev
5

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.848 High

EPSS

Percentile

98.5%

JSON

Bulletin has no description

CPENameOperatorVersion
libspring-javaeq4.3.5-1

Related

nessus 12
openvas 1
debian 1
ibm 17
symantec 1
debiancve 5
github 5
osv 10
ubuntucve 5
cve 5
redhatcve 5
prion 5
veracode 5
seebug 1
atlassian 1
checkpoint_advisories 2
zdt 1
packetstorm 1
exploitdb 1
redhat 4
thn 1
f5 1
checkpoint_security 1
pentestpartners 1
oracle 11
nessus
nessus
Debian DLA-2635-1 : libspring-java security update
2021-04-27 00:00:00
MySQL Enterprise Monitor 4.x < 4.0.10 / 8.x < 8.0.15 DoS (Jul 2019 CPU)
2020-07-24 00:00:00
Oracle GoldenGate for Big Data 12.3.1.1.x < 12.3.1.1.6 / 12.3.2.1.x < 12.3.2.1.5 Spring Framework DoS (Oct 2019 CPU)
2019-10-16 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-2635-1)
2021-04-24 00:00:00
debian
debian
[SECURITY] [DLA 2635-1] libspring-java security update
2021-04-23 18:29:29
ibm
ibm
Security Bulletin: Public disclosed vulnerability from Spring Framework affects IBM Spectrum LSF Explorer
2019-02-22 05:15:02
Security Bulletin: IBM Security Guardium is affected by a Spring Framework vulnerability
2019-05-06 17:30:01
Security Bulletin: Rational Test Control Panel component in Rational Test Virtualization Server and Rational Test Workbench affected by Spring vulnerability (CVE-2018-15756)
2019-03-27 18:50:01
symantec
symantec
Spring Framework CVE-2018-15756 Denial-Of-Service Vulnerability
2018-10-16 00:00:00
debiancve
debiancve
CVE-2018-15756
2018-10-18 22:29:00
CVE-2018-11040
2018-06-25 15:29:00
CVE-2018-11039
2018-06-25 15:29:00
github
github
Denial of Service in Spring Framework
2020-06-15 19:34:50
Moderate severity vulnerability that affects org.springframework:spring-core
2018-10-16 17:43:45
Spring Framework Cross Site Tracing (XST)
2018-10-16 17:35:54
osv
osv
Denial of Service in Spring Framework
2020-06-15 19:34:50
CVE-2018-15756
2018-10-18 22:29:00
Moderate severity vulnerability that affects org.springframework:spring-core
2018-10-16 17:43:45
ubuntucve
ubuntucve
CVE-2018-15756
2018-10-18 00:00:00
CVE-2018-11039
2018-06-25 00:00:00
CVE-2018-11040
2018-06-25 00:00:00
cve
cve
CVE-2018-15756
2018-10-18 22:29:00
CVE-2018-11040
2018-06-25 15:29:00
CVE-2018-11039
2018-06-25 15:29:00
redhatcve
redhatcve
CVE-2018-15756
2018-10-25 12:49:01
CVE-2018-11040
2018-10-17 04:50:03
CVE-2018-11039
2018-10-17 04:49:30
prion
prion
Denial of service
2018-10-18 22:29:00
Cross site scripting
2018-06-25 15:29:00
Cross site scripting
2018-06-25 15:29:00
veracode
veracode
Denial Of Service (DoS)
2018-10-19 02:43:50
Cross-Site Tracing (XST)
2018-06-18 05:37:04
Cross-Domain Request Through Insecure JSONP Defaults
2018-06-18 06:07:22
seebug
seebug
spring-messaging Remote Code Execution(CVE-2018-1270)
2018-04-08 00:00:00
atlassian
atlassian
Insecure version of Spring Web MVC used in Confluence Analytics
2020-02-19 22:31:10
checkpoint_advisories
checkpoint_advisories
Pivotal Spring Framework spring-messaging Module STOMP Remote Code Execution (CVE-2018-1270)
2019-02-19 00:00:00
VMware Spring Framework Remote Code Execution (CVE-2018-1270; CVE-2018-1275)
2018-04-12 00:00:00
zdt
zdt
Pivotal Spring Java Framework < 5.0 - Remote Code Execution Exploit
2018-05-29 00:00:00
packetstorm
packetstorm
Pivotal Spring Java Framework 5.0.x Remote Code Execution
2018-05-29 00:00:00
exploitdb
exploitdb
Pivotal Spring Java Framework < 5.0 - Remote Code Execution
2018-05-29 00:00:00
redhat
redhat
(RHSA-2020:3133) Important: Red Hat AMQ Broker 7.4.4 release and security update
2020-07-23 15:06:14
(RHSA-2018:1320) Critical: Red Hat OpenShift Application Runtimes security and bug fix update
2018-05-03 17:05:40
(RHSA-2018:2939) Critical: Red Hat FIS 2.0 on Fuse 6.3.0 R8 security and bug fix update
2018-10-17 19:27:11
thn
thn
Remote Execution Flaw Threatens Apps Built Using Spring Framework — Patch Now
2018-04-06 07:58:00
f5
f5
K29042031 : Multiple Spring Framework vulnerabilities
2018-04-07 00:00:00
checkpoint_security
checkpoint_security
Check Point Response to Spring Vulnerabilities CVE-2022-22963, CVE-2022-22946, CVE-2022-22947, CVE-2022-22965 (Spring4Shell) and CVE-2022-22950
2022-03-30 21:41:02
pentestpartners
pentestpartners
Vulnerabilities that aren’t. Cross Site Tracing / XST
2022-01-25 06:08:46
oracle
oracle
Oracle Critical Patch Update Advisory - July 2019
2019-07-16 00:00:00
Oracle Critical Patch Update Advisory - January 2019
2019-01-15 00:00:00
Oracle Critical Patch Update Advisory - April 2019
2019-04-16 00:00:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.848 High

EPSS

Percentile

98.5%

JSON
Related for OSV:DLA-2635-1
nessus12openvas1debian1ibm17symantec1debiancve5github5osv10ubuntucve5cve5redhatcve5prion5veracode5seebug1atlassian1checkpoint_advisories2zdt1packetstorm1exploitdb1redhat4thn1f51checkpoint_security1pentestpartners1oracle11