Lucene search

CVE-2023-20861

🗓️ 23 Mar 2023 00:00:00Reported by ubuntu.comType

Spring Framework DoS vulnerability CVE-2023-20861

Reporter	Title	Published	Views	Family All 77
CVE	CVE-2023-20861	23 Mar 202321:15	–	cve
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in VMware Tanzu Spring Framework (CVE-2023-20861)	28 Jun 202320:44	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Spring Framework affects IBM Process Mining . CVE-2023-20861	5 May 202314:43	–	ibm
IBM Security Bulletins	Security Bulletin: Denial of Service vulnerability in Spring may affect IBM Business Automation Workflow - CVE-2023-20861	28 Apr 202317:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM ECM Content Management Interoperability Services (CMIS) spring-expression security vulnerability CVE-2023-20861	3 May 202317:28	–	ibm
IBM Security Bulletins	Security Bulletin: VMware Tanzu Spring Framework is vulnerable to CVE-2023-20861 and CVE-2023-20863 used in IBM Maximo Application Suite - Monitor Component	24 Jul 202320:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in VMware Tanzu Spring Framework	2 May 202322:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in VMware Tanzu Spring Framework affect IBM Process Designer 8.5.7 shipped with IBM Business Automation Workflow	5 Jun 202315:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in VMware Tanzu Spring Framework [CVE-2023-20861, CVE-2023-20860]	12 Feb 202419:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Symphony with Spring Framework is vulnerable to a denial of service, caused by improper input validation	5 Oct 202320:36	–	ibm

Source	Link
spring	www.spring.io/security/cve-2023-20861
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-20861
launchpad	www.launchpad.net/bugs/cve/CVE-2023-20861
security-tracker	www.security-tracker.debian.org/tracker/CVE-2023-20861

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	18.04	noarch	libspring-java	any	UNKNOWN
ubuntu	20.04	noarch	libspring-java	any	UNKNOWN
ubuntu	22.04	noarch	libspring-java	any	UNKNOWN
ubuntu	24.04	noarch	libspring-java	any	UNKNOWN
ubuntu	14.04	noarch	libspring-java	any	UNKNOWN
ubuntu	16.04	noarch	libspring-java	any	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

23 Mar 2023 00:00Current

6.6Medium risk

Vulners AI Score6.6

CVSS36.5

EPSS0.001