io.zipkin.java:zipkin-autoconfigure-collector-rabbitmq (>=2.11.13, <=2.12.9), io.zipkin.reporter2:zipkin-reporter-spring-beans (>=2.7.15, <=2.8.2) +3 more potentially affected by CVE-2023-46120 via com.rabbitmq:amqp-client (4.10.0)

com.rabbitmq:amqp-client MAVEN version 4.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - io.zipkin.java:zipkin-autoconfigure-collector-rabbitmq =2.11.13, =2.7.15, =2.7.15, =2.11.13, =2.12.9 -...

7.19.0 < 7.19.3 Embedded Spring-Beans Denial Of Service

According to its self-reported version number, the Atlassian Confluence application running on the remote host is 7.13.9 prior to 7.13.12, 7.19.0 prior to 7.19.3. It is, therefore, affected by a Denial of Service DoS attack vulnerability when relying on attacker controlled data binding to set a...

Atlassian Confluence 7.13.9 < 7.13.12 Embedded Spring-Beans Denial Of Service

According to its self-reported version number, the Atlassian Confluence application running on the remote host is 7.13.9 prior to 7.13.12, 7.19.0 prior to 7.19.3. It is, therefore, affected by a Denial of Service DoS attack vulnerability when relying on attacker controlled data binding to set a...

Synchrony Proxy: spring-beans 5.3.19 is vulnerable to CVE-2022-22970

h3. Issue Summary spring-beans is vulnerable to CVE-2022-22970 This is reproducible on Data Center: yes h3. Steps to Reproduce Install Confluence 7.13.9 Step 2 h3. Expected Results Expect that synchrony-proxy/WEB-INF/lib contains spring-beans-5.3.20.jar or higher h3. Actual Results...

org.springframework:spring-aop (1.2.2), org.springframework:spring-beans (1.2.2) +10 more potentially affected by CVE-2011-2730 via org.springframework:spring-core (1.2.2)

org.springframework:spring-core MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.springframework:spring-aop 1.2.2 - org.springframework:spring-beans 1.2.2 -...

org.springframework:spring-aop (1.2.3), org.springframework:spring-beans (1.2.3) +10 more potentially affected by CVE-2011-2730 via org.springframework:spring-core (1.2.3)

org.springframework:spring-core MAVEN version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.springframework:spring-aop 1.2.3 - org.springframework:spring-beans 1.2.3 -...

co.fingerprintsoft:notification-spring-boot-autoconfigure (1.0.10), co.fingerprintsoft:notification-spring-boot-starter (1.0.10) +336 more potentially affected by CVE-2022-22970 via org.springframework:spring-beans (4.2.8.release)

org.springframework:spring-beans MAVEN version 4.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - co.fingerprintsoft:notification-spring-boot-autoconfigure 1.0.10 -...

am.ik.springmvc:new-controller (>=0.1.0, <=0.2.0), br.ufc.quixada.npi:npi-core-api (0.1.0) +581 more potentially affected by CVE-2022-22970 via org.springframework:spring-beans (4.1.4.release)

org.springframework:spring-beans MAVEN version 4.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - am.ik.springmvc:new-controller =0.1.0, =0.0.1, =1.0.1, =0.5.0-rc2, =0.6.0-rc1,...

net.sourceforge.jsf-comp:acegi-jsf (1.1.3), org.acegisecurity:acegi-security (>=1.0.5, <=1.0.7) +35 more potentially affected by CVE-2022-22970 via org.springframework:spring-beans (1.2.9)

org.springframework:spring-beans MAVEN version 1.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - net.sourceforge.jsf-comp:acegi-jsf 1.1.3 - org.acegisecurity:acegi-security =1.0.5, =1.0.5,...

br.com.tecsinapse:glimpse-server (>=1.1.1, <=1.1.2), com.alexkasko.springjdbc.typedqueries:typed-queries-codegen (>=1.0, <=1.4.4) +91 more potentially affected by CVE-2022-22970 via org.springframework:spring-beans (3.0.2.release)

org.springframework:spring-beans MAVEN version 3.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - br.com.tecsinapse:glimpse-server =1.1.1, =1.0, =1.0, =1.0, =1.0, =1.0, =1.0.0, =6.0.2,...

br.com.ideotech:draw-out-spring-boot-aop (>=1.5.19.release, <=1.5.19-4.release), br.com.ideotech:draw-out-spring-boot-lib (>=1.5.19.release, <=1.5.19-4.release) +825 more potentially affected by CVE-2022-22970 via org.springframework:spring-beans (4.3.22.release)

org.springframework:spring-beans MAVEN version 4.3.22.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - br.com.ideotech:draw-out-spring-boot-aop =1.5.19.release, =1.5.19.release,...

com.discursive.dao.generic:generic-dao (>=2.0, <=2.1), com.google.inject.extensions:guice-spring (2.0) +205 more potentially affected by CVE-2022-22970 via org.springframework:spring-beans (2.0.6)

org.springframework:spring-beans MAVEN version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - com.discursive.dao.generic:generic-dao =2.0, =1.0, =0.9, =0.7.2, =0.0.1, =1.0.0, =1.1.2,...

org.springframework:spring-aop (2.0-m4), org.springframework:spring-context (2.0-m4) +6 more potentially affected by CVE-2022-22970 via org.springframework:spring-beans (2.0-m4)

org.springframework:spring-beans MAVEN version 2.0-m4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - org.springframework:spring-aop 2.0-m4 - org.springframework:spring-context 2.0-m4 -...

at.molindo:spring-data-custom (1.0.0), at.researchstudio.sat:won-core (>=0.2, <=0.3) +1515 more potentially affected by CVE-2022-22970 via org.springframework:spring-beans (4.3.8.release)

org.springframework:spring-beans MAVEN version 4.3.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - at.molindo:spring-data-custom 1.0.0 - at.researchstudio.sat:won-core =0.2, =0.2, =0.2,...

org.springframework:spring-aop (1.2.2), org.springframework:spring-context (1.2.2) +9 more potentially affected by CVE-2022-22970 via org.springframework:spring-beans (1.2.2)

org.springframework:spring-beans MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - org.springframework:spring-aop 1.2.2 - org.springframework:spring-context 1.2.2 -...

com.aol.microservices:micro-general-exception-mapper (>=0.77, <=0.91.11), com.aol.microservices:micro-grizzly-with-jersey (>=0.62, <=0.91.8) +574 more potentially affected by CVE-2022-22970 via org.springframework:spring-beans (3.2.3.release)

org.springframework:spring-beans MAVEN version 3.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - com.aol.microservices:micro-general-exception-mapper =0.77, =0.62, =0.62, =0.91.3, =0.8...

com.free-now.apis:phrase-java-client (>=1.0.8, <=3.0.0), com.free-now.maven.plugins:phrase-plugin (>=2.0.0, <=2.1.0) +87 more potentially affected by CVE-2022-22970 via org.springframework:spring-beans (3.2.15.release)

org.springframework:spring-beans MAVEN version 3.2.15.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - com.free-now.apis:phrase-java-client =1.0.8, =2.0.0, =2.0.1, =2.0.1, =3.1.0, =1.0.0,...

africa.absa:inception-api (>=1.0.0, <=1.2.0), africa.absa:inception-application (>=1.0.0, <=1.2.0) +16945 more potentially affected by CVE-2022-22970 via org.springframework:spring-beans (>=5.3.0, <=5.3.19)

org.springframework:spring-beans MAVEN version =5.3.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.2.0 and more Source cves: CVE-2022-22970 Source advisory: OSV:GHSA-HH26-6XWR-GGV7...

br.com.neppo.jlibs:jira-client (1.0), cn.chenzw.swagger:swagger-ext-all (1.0.1) +491 more potentially affected by CVE-2022-22970 via org.springframework:spring-beans (4.3.24.release)

org.springframework:spring-beans MAVEN version 4.3.24.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - br.com.neppo.jlibs:jira-client 1.0 - cn.chenzw.swagger:swagger-ext-all 1.0.1 -...

br.com.jarch:jarch-framework (>=2.23.0, <=18.3.1), ch.epfl.bbp.nlp:bluima_abbreviations (>=1.0.0, <=1.0.1) +873 more potentially affected by CVE-2022-22970 via org.springframework:spring-beans (3.1.2.release)

org.springframework:spring-beans MAVEN version 3.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - br.com.jarch:jarch-framework =2.23.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0,...