org.opencredo.cloud.storage:cloud-storage-spring-integration-support (1.1), org.opencredo.cloud.storage:quote-sample (1.1) +1 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (1.0.3.release)

org.springframework.integration:spring-integration-file MAVEN version 1.0.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

org.springframework.batch:spring-batch-admin-manager (1.2.0.release), org.springframework.integration:spring-integration-ftp (2.0.0.release) +1 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (2.0.0.release)

org.springframework.integration:spring-integration-file MAVEN version 2.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

org.springframework.batch:spring-batch-admin-manager (>=1.2.1.release, <=1.2.2.release), org.springframework.integration:spring-integration-ftp (2.0.3.release) +1 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (2.0.3.release)

org.springframework.integration:spring-integration-file MAVEN version 2.0.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

com.mozu:mozu-api-jobs (>=1.0.13, <=1.0.23), gradle.plugin.com.atc.gradle.plugins.xd:spring-xd-deploy-plugin (>=0.0.1, <=0.0.8) +5 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (3.0.2.release)

org.springframework.integration:spring-integration-file MAVEN version 3.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: - com.mozu:mozu-api-jobs =1.0.13, =0.0.1,...

gradle.plugin.com.atc.gradle.plugins.xd:spring-xd-deploy-plugin (>=0.0.1, <=0.0.8), org.springframework.xd:spring-xd-rest-client (>=1.0.3.release, <=1.0.4.release) +2 more potentially affected by CVE-2018-1229 via org.springframework.batch:spring-batch-admin-manager (1.3.0.release)

org.springframework.batch:spring-batch-admin-manager MAVEN version 1.3.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.batch:spring-batch-admin-manager and may be impacted: -...

com.mozu:mozu-api-jobs (>=1.0.13, <=1.0.23), org.springframework.cloud.dist:spring-cloud-dataflow-server-yarn-dist (1.0.0.release) +21 more potentially affected by CVE-2018-1229 via org.springframework.batch:spring-batch-admin-manager (1.3.1.release)

org.springframework.batch:spring-batch-admin-manager MAVEN version 1.3.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.batch:spring-batch-admin-manager and may be impacted: - com.mozu:mozu-api-jobs =1.0.13, =1.3.1.release,...

org.springframework.batch:spring-batch-admin-manager (1.0.0.release), org.springframework.batch:spring-batch-integration (1.0.0.release) +1 more potentially affected by CVE-2019-3774 via org.springframework.batch:spring-batch-core (2.1.1.release)

org.springframework.batch:spring-batch-core MAVEN version 2.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.batch:spring-batch-core and may be impacted: - org.springframework.batch:spring-batch-admin-manager 1.0.0.releas...

org.springframework.batch:spring-batch-admin-manager (1.2.0.release), org.springframework.batch:spring-batch-integration (1.2.0.release) +1 more potentially affected by CVE-2019-3774 via org.springframework.batch:spring-batch-core (2.1.5.release)

org.springframework.batch:spring-batch-core MAVEN version 2.1.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.batch:spring-batch-core and may be impacted: - org.springframework.batch:spring-batch-admin-manager 1.2.0.releas...

org.springframework.batch:spring-batch-admin-manager (>=1.2.1.release, <=1.2.2.release), org.springframework.batch:spring-batch-integration (>=1.2.1.release, <=1.2.2.release) +1 more potentially affected by CVE-2019-3774 via org.springframework.batch:spring-batch-core (2.1.7.release)

org.springframework.batch:spring-batch-core MAVEN version 2.1.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.batch:spring-batch-core and may be impacted: - org.springframework.batch:spring-batch-admin-manager...

Cross-site Scripting (XSS)

spring-batch-admin-manager is vulnerable to stored cross-site scripting XSS attacks. Attackers can inject arbitrary webscript or HTML using the file upload feature...