Linux Distros Unpatched Vulnerability : CVE-2016-5007

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Both Spring Security 3.2.x, 4.0.x, 4.1.0 and the Spring Framework 3.2.x, 4.0.x, 4.1.x, 4.2.x rely on URL pattern mappings for authorization and for mapping...

OESA-2021-1416 springframework security update

The spring is based on code pubilshed in Expert One-on-One J2EE Design and Dvelopment by Rod Johnson Wrox, 2002.it is a layered Java/J2ee application framework. Security Fixes: Both Spring Security 3.2.x, 4.0.x, 4.1.0 and the Spring Framework 3.2.x, 4.0.x, 4.1.x, 4.2.x rely on URL pattern mapping...

com.myjeeva:spring-extensions (>=1.0.0, <=1.0.1), org.springframework.security:spring-security-acl (2.0.6.release) +6 more potentially affected by CVE-2016-5007 via org.springframework.security:spring-security-core (2.0.6.release)

org.springframework.security:spring-security-core MAVEN version 2.0.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.myjeeva:spring-extensions =1.0.0, =1.0.1 -...

ar.com.fdvs:dynamicjasper (>=5.0.9, <=5.1.0), br.com.caelum.stella:caelum-stella-boleto (>=2.1.7, <=2.2.2) +901 more potentially affected by CVE-2016-5007 via org.springframework:spring-core (3.0.6.release)

org.springframework:spring-core MAVEN version 3.0.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - ar.com.fdvs:dynamicjasper =5.0.9, =2.1.7, =20.3.0, =20.3.0, =2.23.5, =2.23.5, =18.4.0,...

net.sourceforge.jfacets:jfacets-acegi (>=3.1, <=3.2.1), org.acegisecurity:acegi-security (1.0.3) +35 more potentially affected by CVE-2016-5007 via org.springframework:spring-core (1.2.8)

org.springframework:spring-core MAVEN version 1.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - net.sourceforge.jfacets:jfacets-acegi =3.1, =1.0.2, =1.0.2, =1.0.0, =1.0.0, =1.0.2 -...

ai.mattmann.mnemosyne:cas-cli (>=1.11.0, <=1.13.8), ai.mattmann.mnemosyne:cas-crawler (>=1.11.0, <=1.13.8) +151 more potentially affected by CVE-2016-5007 via org.springframework:spring-core (2.5.4)

org.springframework:spring-core MAVEN version 2.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - ai.mattmann.mnemosyne:cas-cli =1.11.0, =1.11.0, =1.11.0, =1.11.0, =1.11.0, =1.11.0, =1.11.0,...

org.apache.cocoon:cocoon-ajax-impl (1.0.0-m3), org.apache.cocoon:cocoon-apples-impl (1.0.0-rc1) +141 more potentially affected by CVE-2016-5007 via org.springframework:spring-core (2.0.5)

org.springframework:spring-core MAVEN version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.apache.cocoon:cocoon-ajax-impl 1.0.0-m3 - org.apache.cocoon:cocoon-apples-impl 1.0.0-rc1 -...

com.browseengine.bobo:bobo-browse (>=3.2.0, <=4.0.2), com.browseengine.bobo:bobo-solr (3.2.0) +435 more potentially affected by CVE-2016-5007 via org.springframework:spring-core (2.5.5)

org.springframework:spring-core MAVEN version 2.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - com.browseengine.bobo:bobo-browse =3.2.0, =0.2.0, =0.0.2, =0.1.9, =0.1.3, =0.6.0, =0.7.8, =0.6.0,...

com.cedac.spring.security:spring-security-mongodb (1.0.0), com.foreach.across.modules:admin-web-module (>=1.0.0.release, <=1.1.0.release) +127 more potentially affected by CVE-2016-5007 via org.springframework.security:spring-security-core (3.2.7.release)

org.springframework.security:spring-security-core MAVEN version 3.2.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.cedac.spring.security:spring-security-mongodb 1.0...

com.discursive.dao.generic:generic-dao (>=2.0, <=2.1), com.google.inject.extensions:guice-spring (2.0) +206 more potentially affected by CVE-2016-5007 via org.springframework:spring-core (2.0.6)

org.springframework:spring-core MAVEN version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - com.discursive.dao.generic:generic-dao =2.0, =1.0, =0.9, =0.7.2, =0.0.1, =1.0.0, =1.1.2,...

com.mysema.web:webmin (0.2.3), com.smartitengineering:smart-hibernate-abstract-dao (0.2) +81 more potentially affected by CVE-2016-5007 via org.springframework:spring-core (2.0.7)

org.springframework:spring-core MAVEN version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - com.mysema.web:webmin 0.2.3 - com.smartitengineering:smart-hibernate-abstract-dao 0.2 -...

de.codecentric:jmeter-graph-maven-plugin (0.1.0), net.sourceforge.openutils:openutils-bshd5 (>=2.0.3, <=2.0.4) +62 more potentially affected by CVE-2016-5007 via org.springframework:spring-core (2.5.3)

org.springframework:spring-core MAVEN version 2.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - de.codecentric:jmeter-graph-maven-plugin 0.1.0 - net.sourceforge.openutils:openutils-bshd5 =2.0.3...

ch.ralscha:extdirectspring (>=1.0.0, <=1.0.1), com.alexkasko.installer:maven-windows-service-installer-plugin (>=1.0.2, <=1.0.6) +264 more potentially affected by CVE-2016-5007 via org.springframework:spring-core (3.0.3.release)

org.springframework:spring-core MAVEN version 3.0.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - ch.ralscha:extdirectspring =1.0.0, =1.0.2, =4.0.0, =22.0.2-beta, =3.0.2, =1.1.0-rc2,...

be.eliwan:ew-profiling-api (>=1.0, <=1.4), be.eliwan:ew-profiling-core (>=1.0, <=1.4) +1356 more potentially affected by CVE-2016-5007 via org.springframework:spring-core (3.0.5.release)

org.springframework:spring-core MAVEN version 3.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - be.eliwan:ew-profiling-api =1.0, =1.0, =2.0-beta1, =1.1.1, =1.0.2, =1.1.2, =1.2, =1.0.0,...

biz.paluch.redis:lettuce (>=3.0.beta1, <=4.0.beta1), biz.paluch.redis:spinach (>=0.1, <=0.3) +343 more potentially affected by CVE-2016-5007 via org.springframework:spring-core (3.1.4.release)

org.springframework:spring-core MAVEN version 3.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - biz.paluch.redis:lettuce =3.0.beta1, =0.1, =1.0.0, =2.0.0-rc1, =1.5, =0.0.1, =2.2.1,...

ar.com.jmfsg:api-doc (>=0.0.28, <=0.0.34), ch.ralscha:extdirectspring (>=1.3.2, <=1.3.5) +268 more potentially affected by CVE-2016-5007 via org.springframework:spring-core (3.2.2.release)

org.springframework:spring-core MAVEN version 3.2.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - ar.com.jmfsg:api-doc =0.0.28, =1.3.2, =1.0.0, =1.6.0, =2.0.2, =2.0.2, =2.0.2, =2.0.2,...

br.com.caelum.vraptor:vraptor-test (2.0.0), cc.concurrent:config-server (0.1) +527 more potentially affected by CVE-2016-5007 via org.springframework:spring-core (3.2.4.release)

org.springframework:spring-core MAVEN version 3.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - br.com.caelum.vraptor:vraptor-test 2.0.0 - cc.concurrent:config-server 0.1 -...

cn.taskflow.jsv:json-schema-validator (>=0.0.1, <=0.1.1), com.alibaba.citrus:citrus-springext-all (>=3.1.6, <=3.2.4) +92 more potentially affected by CVE-2016-5007 via org.springframework:spring-core (3.2.7.release)

org.springframework:spring-core MAVEN version 3.2.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - cn.taskflow.jsv:json-schema-validator =0.0.1, =3.1.6, =3.1.6, =3.1.6, =0.10.0, =1.0,...

com.elibom:jogger (>=0.2.0, <=0.2.1), com.github.qiujiayu:autoload-cache (>=1.3, <=4.11) +142 more potentially affected by CVE-2016-5007 via org.springframework:spring-core (3.2.10.release)

org.springframework:spring-core MAVEN version 3.2.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - com.elibom:jogger =0.2.0, =1.3, =4.1, =1.0.0.release, =1.0.0.release, =1.0.2, =1.0.2,...

com.att.nsa:msgrtr (0.0.5), com.comcast.magic-wand:appium (>=4.0.1, <=4.0.3) +135 more potentially affected by CVE-2016-5007 via org.springframework:spring-core (3.2.14.release)

org.springframework:spring-core MAVEN version 3.2.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - com.att.nsa:msgrtr 0.0.5 - com.comcast.magic-wand:appium =4.0.1, =1.0.8, =2.0.1, =2.0.1,...