org.springframework:spring-hibernate (1.2.3), org.springframework:spring-mock (1.2.3) +3 more potentially affected by CVE-2013-6430 via org.springframework:spring-web (1.2.3)

org.springframework:spring-web MAVEN version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-hibernate 1.2.3 - org.springframework:spring-mock 1.2.3 -...

org.springframework:spring-portlet (2.0-m1), org.springframework:spring-remoting (2.0-m1) +1 more potentially affected by CVE-2013-6430 via org.springframework:spring-web (2.0-m1)

org.springframework:spring-web MAVEN version 2.0-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-portlet 2.0-m1 - org.springframework:spring-remoting 2.0-m1 -...

org.springframework:spring-hibernate (1.2.1), org.springframework:spring-mock (1.2.1) +3 more potentially affected by CVE-2013-6430 via org.springframework:spring-web (1.2.1)

org.springframework:spring-web MAVEN version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-hibernate 1.2.1 - org.springframework:spring-mock 1.2.1 -...

org.springframework:spring-hibernate (1.2.4), org.springframework:spring-mock (1.2.4) +3 more potentially affected by CVE-2013-6430 via org.springframework:spring-web (1.2.4)

org.springframework:spring-web MAVEN version 1.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-hibernate 1.2.4 - org.springframework:spring-mock 1.2.4 -...

org.springframework:spring-portlet (2.0.3), org.springframework:spring-remoting (2.0.3) +4 more potentially affected by CVE-2013-6430 via org.springframework:spring-web (2.0.3)

org.springframework:spring-web MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-portlet 2.0.3 - org.springframework:spring-remoting 2.0.3 -...

com.sun.jersey:jersey-spring (0.8-ea), org.springframework.ws:spring-ws-core (1.5.0) +5 more potentially affected by CVE-2013-6430 via org.springframework:spring-web (2.5.2)

org.springframework:spring-web MAVEN version 2.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.sun.jersey:jersey-spring 0.8-ea - org.springframework.ws:spring-ws-core 1.5.0 -...

Low: Red Hat Security Advisory: Red Hat Process Automation Manager 7.12.1 security update

An update is now available for Red Hat Process Automation Manager. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE lin...

Security Bulletin: IBM Maximo For Civil infrastructure is vulnerable to a remote code execution in Spring Framework (CVE-2022-22965)

Summary IBM Maximo For Civil infrastructure is affected but not classified as vulnerable to a remote code execution in Spring Framework CVE-2022-22965 as it does not meet all of the following criteria: 1. JDK 9 or higher, 2. Apache Tomcat as the Servlet container, 3. Packaged as WAR in contrast t...

Exploit for Code Injection in Vmware Spring_Framework

Spring4shell RCE vulnerability This vulnerability affects Spr...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.6), ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.4.0.1) +17816 more potentially affected by CVE-2022-22965 via org.springframework:spring-webmvc (>=1.2.1, <=5.2.19.release)

org.springframework:spring-webmvc MAVEN version =1.2.1, =0.0.1, =4.4.0.0, =0.0.12, =0.1.6, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.1.1, =j8.2.2.0, =j8.2.2.0, =finchley.sr2.sr1, =finchley.sr4, =greenwich.sr2.1 and more Source cves: CVE-2022-22965 Source advisory: MEND:CVE-2022-22965...

africa.absa:inception-api (>=1.0.0, <=1.2.0), africa.absa:inception-codes-api (>=1.0.0, <=1.2.0) +5570 more potentially affected by CVE-2022-22965 via org.springframework:spring-webmvc (>=5.3.0, <=5.3.17)

org.springframework:spring-webmvc MAVEN version =5.3.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =4.4.0.2, =1.4.2, =1.6.6, =j8.2.4.0, =j8.2.4.0, =j11.2.6.0 and more Source cves: CVE-2022-22965 Source advisory: MEND:CVE-2022-22965...

ch.ralscha:extdirectspring (>=1.0.2, <=1.0.3), com.github.rgladwell:spring-mvc-util (>=1.0.3, <=1.0.6) +30 more potentially affected by CVE-2022-22965 via org.springframework:spring-webmvc (3.0.4.release)

org.springframework:spring-webmvc MAVEN version 3.0.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ch.ralscha:extdirectspring =1.0.2, =1.0.3, =0.7.1, =1.3, =1.3, =1.3, =1.3.1 -...

Remote Code Execution in Spring Framework

Spring Framework prior to versions 5.2.20 and 5.3.18 contains a remote code execution vulnerability known as Spring4Shell. Impact A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution RCE via data binding. The specific exploit requires the...

au.com.dius.pact.provider:spring (>=4.1.0, <=4.1.6), au.com.dius:pact-jvm-provider-spring (>=4.0.0-beta.1, <=4.0.10) +261 more potentially affected by CVE-2022-22965 via org.springframework:spring-webmvc (4.3.19.release)

org.springframework:spring-webmvc MAVEN version 4.3.19.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - au.com.dius.pact.provider:spring =4.1.0, =4.0.0-beta.1, =3.6.0-rc.1, =2.5.0, =2.5.0,...

com.payneteasy.superfly:superfly-web (>=1.2-1, <=1.4-3), org.codehaus.enunciate:enunciate-spring3-app-rt (>=1.20-rc1, <=1.31) +15 more potentially affected by CVE-2022-22965 via org.springframework:spring-webmvc (3.0.2.release)

org.springframework:spring-webmvc MAVEN version 3.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.payneteasy.superfly:superfly-web =1.2-1, =1.20-rc1, =1.6, =1.6, =1.6, =1.1.1,...

com.ctosb:ctosb-core (>=1.0.0, <=1.0.2), com.github.wangdasong:nsw-base-core (1.0.4) +15 more potentially affected by CVE-2022-22965 via org.springframework:spring-webmvc (3.2.17.release)

org.springframework:spring-webmvc MAVEN version 3.2.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.ctosb:ctosb-core =1.0.0, =1.5.1, =3.0.12, =1.4.0-rc2, =1.4.0-rc2, =1.4.0-rc2,...

cn.fastoo:fastoo-java-api (20171130), com.github.lynzabo.codegen:codegen-test (1.0-release) +37 more potentially affected by CVE-2022-22965 via org.springframework:spring-webmvc (2.5.4)

org.springframework:spring-webmvc MAVEN version 2.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - cn.fastoo:fastoo-java-api 20171130 - com.github.lynzabo.codegen:codegen-test 1.0-release -...

cn.afterturn:easypoi-spring-boot-starter (>=0.2, <=4.0.0), cn.afterturn:easypoi-web (>=3.0.1, <=4.0.0) +162 more potentially affected by CVE-2022-22965 via org.springframework:spring-webmvc (3.1.1.release)

org.springframework:spring-webmvc MAVEN version 3.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - cn.afterturn:easypoi-spring-boot-starter =0.2, =3.0.1, =3.1.0, =3.1.0, =1.0.4,...

ch.ralscha:extdirectspring (>=1.0.12, <=1.0.13), com.github.enpassant:ickenham-spring-mvc_2.11 (>=1.0.0, <=1.5.0) +76 more potentially affected by CVE-2022-22965 via org.springframework:spring-webmvc (3.0.6.release)

org.springframework:spring-webmvc MAVEN version 3.0.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ch.ralscha:extdirectspring =1.0.12, =1.0.0, =1.0.0, =1.0.10, =0.1, =1.0,...

ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (>=0.4, <=0.5), com.kurento.kmf:kmf-broker (4.3.0) +13 more potentially affected by CVE-2022-22965 via org.springframework:spring-webmvc (4.0.1.release)

org.springframework:spring-webmvc MAVEN version 4.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay =0.4, =4.1.0, =4.1.0, =4.1.0, =4.1.0,...