Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Remote Code Execution (RCE)

🗓️ 23 Jul 2020 04:20:15Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode🔗 sca.analysiscenter.veracode.com👁 22 Views

Spring Integration Core vulnerability to Remote Code Execution (RCE) via Kry

Related
Detection
Refs
ReporterTitlePublishedViews
Family
CNVD		Pivotal Software Spring Integration Code Issue Vulnerability
7 Aug 202000:00
–cnvd
CVE		CVE-2020-5413
31 Jul 202019:40
–cve
Cvelist		CVE-2020-5413 Kryo Configuration Allows Code Execution with Unknown "Serialization Gadgets"
31 Jul 202019:40
–cvelist
EUVD		EUVD-2020-0604
7 Oct 202500:30
–euvd
IBM Security Bulletins		Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities
2 Feb 202105:06
–ibm
Github Security Blog		Code execution in Spring Integration
5 Aug 202014:53
–github
NCSC		Vulnerabilities fixed in Oracle Financial Services Applications
21 Apr 202100:00
–ncsc
NCSC		Vulnerabilities fixed in Oracle Financial Services Applications
20 Oct 202100:00
–ncsc
NCSC		Vulnerabilities fixed in Oracle Communications
20 Apr 202200:00
–ncsc
NVD		CVE-2020-5413
31 Jul 202020:15
–nvd
Rows per page
Vulners
Node
springframeworkspring-integration-coreRange4.2.0.RC1–4.3.22.RELEASEjava
OR
springframeworkspring-integration-coreRange5.0.0.RELEASE–5.1.11.RELEASEjava
OR
springframeworkspring-integration-coreRange5.2.0.RELEASE–5.2.7.RELEASEjava
OR
springframeworkspring-integration-coreRange5.3.0.RELEASE–5.3.1.RELEASEjava
SourceLink
githubwww.github.com/spring-projects/spring-integration/releases
springwww.spring.io/blog/2020/07/22/spring-integration-4-3-23-5-1-12-5-2-8-5-3-2-avaialble-cve-2020-5413
githubwww.github.com/spring-projects/spring-integration/compare/c95e6dcc3b4c03570cb7d3065c8cecadd879a48a...99675f8693d08b27bcdc04a98281bd5c375005bb
githubwww.github.com/spring-projects/spring-integration/compare/35ea2688cbdf2f1bc0af39a477c6c4986025e572...004527971bf42a295970f3a7cc2a4f33293302a6
githubwww.github.com/spring-projects/spring-integration/compare/76bf66fa2c3e0fcf4f0e980b2ea9de2aac61775d...dd9977174fd772a8d51c2deb8144a3a107a3ce63
githubwww.github.com/spring-projects/spring-integration/compare/f095f94c7444d2fe9c701cda34fa3af47be85c5e...081b145843ace1b7c4444c4671b7ba472082c49e
githubwww.github.com/advisories/GHSA-86qr-9vqc-pgc6
tanzuwww.tanzu.vmware.com/security/cve-2020-5413
oraclewww.oracle.com/security-alerts/cpuApr2021.html
oraclewww.oracle.com/security-alerts/cpuapr2022.html
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
12 May 2022 16:32Current
4.4Medium risk
Vulners AI Score4.4
CVSS 27.5
CVSS 3.19.8
EPSS0.01768
spring integration corevulnerabilityremote code executionkryodeserialization
22