com.github.dblock.waffle:waffle-spring-security2 (>=1.5, <=1.6), com.microsoftopentechnologies:azure-slave (>=0.1.0, <=0.3.0) +201 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-core (2.0.7.release)

org.springframework.security:spring-security-core MAVEN version 2.0.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.github.dblock.waffle:waffle-spring-security2 =1.5...

cc.ereach:ereach-boot-starter-security (1.0.1), com.ge.predix:uaa-token-lib (>=3.3.2, <=4.0.1) +114 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-core (3.2.10.release)

org.springframework.security:spring-security-core MAVEN version 3.2.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - cc.ereach:ereach-boot-starter-security 1.0.1 -...

org.appfuse.archetypes:appfuse-basic-jsf (2.0.2), org.appfuse.archetypes:appfuse-basic-spring (2.0.2) +42 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-core (2.0.1)

org.springframework.security:spring-security-core MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.appfuse.archetypes:appfuse-basic-jsf 2.0.2 -...

com.payneteasy.superfly:superfly-web (>=1.2-1, <=1.4-3), org.codehaus.enunciate:enunciate-spring3-security-rt (>=1.20, <=1.22) +15 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-core (3.0.2.release)

org.springframework.security:spring-security-core MAVEN version 3.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.payneteasy.superfly:superfly-web =1.2-1, =1.20,...

org.apache.syncope:syncope-core (>=1.0.9, <=1.1.8), org.springframework.security:spring-security-acl (3.1.6.release) +11 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-core (3.1.6.release)

org.springframework.security:spring-security-core MAVEN version 3.1.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.apache.syncope:syncope-core =1.0.9, =1.4.9, =1.4....

fr.xebia.springframework:xebia-spring-security-extras (>=1.1.4, <=1.1.6), org.appfuse.archetypes:appfuse-archetypes (2.1.0-m2) +53 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-core (3.0.4.release)

org.springframework.security:spring-security-core MAVEN version 3.0.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - fr.xebia.springframework:xebia-spring-security-extras...

org.apache.camel:camel-example-spring-security (>=2.14.0, <=2.14.4), org.apache.camel:camel-spring-security (>=2.14.0, <=2.14.4) +27 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-core (3.1.7.release)

org.springframework.security:spring-security-core MAVEN version 3.1.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.apache.camel:camel-example-spring-security =2.14....

com.aerse:gcless (11.2), com.aerse:spring-security-taglib (1.1) +107 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-core (3.2.1.release)

org.springframework.security:spring-security-core MAVEN version 3.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.aerse:gcless 11.2 -...

org.springframework.security:spring-security-acl (2.0.0), org.springframework.security:spring-security-adapters (2.0.0) +18 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-core (2.0.0)

org.springframework.security:spring-security-core MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.springframework.security:spring-security-acl 2.0.0 -...

com.17jee:e-cloud-authorize (3.0.0.release), com.17jee:e-cloud-gateway (>=3.0.0, <=3.0.1.1) +47 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-core (3.2.8.release)

org.springframework.security:spring-security-core MAVEN version 3.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.17jee:e-cloud-authorize 3.0.0.release -...

org.jasig.cas:cas-management-webapp (>=4.0.0-rc4, <=4.0.7) potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-cas (3.2.0.release)

org.springframework.security:spring-security-cas MAVEN version 3.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-cas and may be impacted: - org.jasig.cas:cas-management-webapp =4.0.0-rc4, =4.0.7...

org.openl.rules:org.openl.rules.webstudio (>=5.20.0, <=5.20.1) potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-cas (3.2.4.release)

org.springframework.security:spring-security-cas MAVEN version 3.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-cas and may be impacted: - org.openl.rules:org.openl.rules.webstudio =5.20.0,...

br.net.woodstock.rockframework:rockframework-domain (>=1.2.1, <=1.2.2), com.keyholesoftware:khs-sherpa-spring (>=1.2.0, <=1.2.1) +15 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-core (3.0.0.release)

org.springframework.security:spring-security-core MAVEN version 3.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - br.net.woodstock.rockframework:rockframework-domain...

at.molindo.social:spring-social-security (1.1.0.release), cn.jhc:spring-social-qq (>=0.0.2, <=0.0.5) +128 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-core (3.2.3.release)

org.springframework.security:spring-security-core MAVEN version 3.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - at.molindo.social:spring-social-security 1.1.0.releas...

org.springframework.security:spring-security-acl (3.1.5.release), org.springframework.security:spring-security-aspects (3.1.5.release) +7 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-core (3.1.5.release)

org.springframework.security:spring-security-core MAVEN version 3.1.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.springframework.security:spring-security-acl...

com.arsframework:ars-module-cms (>=1.0.0, <=1.1.4), com.arsframework:ars-module-educate (>=1.0.0, <=1.1.0) +186 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-core (3.1.3.release)

org.springframework.security:spring-security-core MAVEN version 3.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.arsframework:ars-module-cms =1.0.0, =1.0.0, =1.0....

org.ff4j:ff4j-security-spring (>=1.0.0, <=1.1.0), org.springframework.security:spring-security-acl (3.0.8.release) +7 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-core (3.0.8.release)

org.springframework.security:spring-security-core MAVEN version 3.0.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.ff4j:ff4j-security-spring =1.0.0, =1.1.0 -...

net.unicon.cas:cas-addons (>=1.1-rc1, <=1.7), net.unicon.cas:cas-java-clients-addons (0.5) +12 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-cas (3.1.3.release)

org.springframework.security:spring-security-cas MAVEN version 3.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-cas and may be impacted: - net.unicon.cas:cas-addons =1.1-rc1, =3.5-rc1, =3.5-rc1,...

org.eobjects.datacleaner:datacleaner-monitor-completeness-analysis-wizard (>=5.0-rc1, <=5.1.5.3), org.eobjects.datacleaner:datacleaner-monitor-copy-data-wizard (>=5.0-rc1, <=5.1.5.3) +11 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-cas (3.2.9.release)

org.springframework.security:spring-security-cas MAVEN version 3.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-cas and may be impacted: -...

ai.foremast.metrics:foremast-spring-boot-15x-starter (>=0.1.8, <=0.1.11), ai.foremast.metrics:foremast-spring-boot-1x-k8s-metrics-starter (>=0.1.6, <=0.1.7) +2345 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-core (>=4.0.0.release, <=4.2.12.release)

org.springframework.security:spring-security-core MAVEN version =4.0.0.release, =0.1.8, =0.1.6, =0.1.4-sb1x, =1.0.0, =1.0.0, =1.0.0, =0.3, =0.3, =0.3, =0.3, =0.3, =0.3, =0.3, =0.3, =0.6 - at.researchstudio.sat:won-owner 0.3 and more Source cves: CVE-2019-11272 Source advisory: GHSA-V33X-PRHC-GPH5...