Lucene search
K

13 matches found

IBM Security Bulletins
IBM Security Bulletins
added 5 days ago3 views

Security Bulletin: Multiple Security Vulnerabilities in Spring Framework Affect IBM Sterling B2B Integrator and IBM Sterling File Gateway

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the security vulnerabilities in Spring Framework Vulnerability Details CVEID:CVE-2025-22233 DESCRIPTION: CVE-2024-38820 ensured Locale-independent, lowercase conversion for both the configured disallowedFields patter...

7.5CVSS6.9AI score0.01916EPSS
Exploits1Affected Software1
CNNVD
CNNVD
added 2026/06/09 12:0 a.m.4 views

Spring Framework 安全漏洞

The Spring Framework is an application development framework developed by Spring in a open-source manner. Versions of the Spring Framework such as 7.0.0 and earlier, 6.2.0 and earlier, 6.1.0 and earlier, and 5.3.0 and earlier contain security vulnerabilities. These vulnerabilities stem from the...

7.5CVSS5.3AI score0.00359EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2023/08/09 12:0 a.m.9 views

SUSE: Security Advisory (SUSE-SU-2023:3232-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References5
OSV
OSV
added 2023/08/08 2:47 p.m.6 views

SUSE-SU-2023:3232-1 Security update for tomcat

This update for tomcat fixes the following issues: - Remove the log4j dependency as it is not used by the tomcat package bsc1196137 Security hardening, related to Spring Framework vulnerabilities: - Deprecate getResources and always return null bsc1198136...

7.1AI score
Exploits0References3
OpenVAS
OpenVAS
added 2022/05/17 12:0 a.m.7 views

openSUSE: Security Advisory for tomcat (SUSE-SU-2022:1304-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References2
OSV
OSV
added 2022/04/22 1:25 p.m.2 views

SUSE-SU-2022:1304-1 Security update for tomcat

This update for tomcat fixes the following issues: Security hardening, related to Spring Framework vulnerabilities: - Deprecate getResources and always return null bsc1198136...

7.2AI score
Exploits0References2
OSV
OSV
added 2022/04/21 1:59 p.m.3 views

SUSE-SU-2022:1294-1 Security update for tomcat

This update for tomcat fixes the following issues: - Remove the log4j dependency as it is not used by the tomcat package bsc1196137 Security hardening, related to Spring Framework vulnerabilities: - Deprecate getResources and always return null bsc1198136...

7.1AI score
Exploits0References3
OSV
OSV
added 2022/04/21 12:59 p.m.1 views

SUSE-SU-2022:1293-1 Security update for tomcat

This update for tomcat fixes the following issues: Security hardening, related to Spring Framework vulnerabilities: - Deprecate getResources and always return null bsc1198136...

7.2AI score
Exploits0References2
OSV
OSV
added 2022/04/21 12:58 p.m.3 views

SUSE-SU-2022:1292-1 Security update for tomcat

This update for tomcat fixes the following issues: Security hardening, related to Spring Framework vulnerabilities: - Deprecate getResources and always return null bsc1198136...

7.2AI score
Exploits0References2
OSV
OSV
added 2022/04/14 2:4 p.m.2 views

SUSE-SU-2022:1217-1 Security update for tomcat

This update for tomcat fixes the following issues: Security hardening, related to Spring Framework vulnerabilities: - Deprecate getResources and always return null bsc1198136...

7.2AI score
Exploits0References2
SonicWall
SonicWall
added 2022/04/02 6:13 p.m.15 views

Spring Remote Code Execution: CVE-2022-22963 and CVE-2022-22965

SonicWall PSIRT is tracking two critical vulnerabilities impacting the Spring Framework. This advisory is intended to address both. 1CVE-2022-22963: Remote code execution in Spring Cloud Function by malicious Spring ExpressionIn Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported...

9.8CVSS10AI score0.99948EPSS
Exploits131
IBM Security Bulletins
IBM Security Bulletins
added 2020/12/16 5:55 p.m.44 views

Security Bulletin: Spring Framework vulnerabilities affect IBM Watson Text to Speech and Speech to Text (IBM Watson Speech Services for Cloud Pak for Data 1.2)

Summary Spring Framework vulnerabilities, listed below, affect IBM Watson Text to Speech and Speech to Text IBM Watson Speech Services for Cloud Pak for Data 1.2 Vulnerability Details CVEID: CVE-2020-5421 DESCRIPTION: VMware Tanzu Spring Framework could allow a remote attacker to bypass security...

8.7CVSS0.5AI score0.10736EPSS
Exploits1Affected Software1
Positive Technologies
Positive Technologies
added 2020/01/16 12:0 a.m.9 views

PT-2020-2651 · Oracle +2 · Oracle Retail Order Broker +2

Name of the Vulnerable Software and Affected Versions: Spring Framework versions 5.0.x prior to 5.0.16 Spring Framework versions 5.1.x prior to 5.1.13 Spring Framework versions 5.2.x prior to 5.2.3 Oracle Retail Order Broker affected versions not specified Description: The issue exists due to...

9.8CVSS7.2AI score0.87966EPSS
Exploits23References526
Rows per page
Query Builder