Spring Vulnerabilities and Affected Products - Exploit Intel

Skip to content

Products

Spring Framework28 vulnerabilities
Spring Security22 vulnerabilities
Spring Boot15 vulnerabilities
Spring AI11 vulnerabilities
Spring Web Services8 vulnerabilities
Spring Cloud Config6 vulnerabilities
Spring Tools for Eclipse6 vulnerabilities
Spring4 vulnerabilities
Spring Data Commons4 vulnerabilities
Spring Data REST4 vulnerabilities
Spring for Apache Kafka4 vulnerabilities
Spring for GraphQL4 vulnerabilities
Spring AMQP3 vulnerabilities
Spring HATEOAS3 vulnerabilities
Micrometer2 vulnerabilities
Reactor Netty2 vulnerabilities
Spring Cloud Function2 vulnerabilities
Spring Data MongoDB2 vulnerabilities
Spring gRPC2 vulnerabilities
Spring Integration2 vulnerabilities
Spring LDAP2 vulnerabilities
Spring Security OAuth2 vulnerabilities
Spring Tools for VSCode / Cursor / Theia2 vulnerabilities
Spring Web Flow2 vulnerabilities
CLI VSCode Extension1 vulnerability

Spring vulnerability results
Vulnerability	Title and context	CVSS	EPSS	PoCs	Signals	STIX action
CVE-2019-3802MEDIUM	Additional information exposure with Spring Data JPA example matcher This affects Spring Data JPA in versions up to and including 2.1.6, 2.0.14 and 1.11.20. ExampleMatcher using ExampleMatcher.StringMatcher.STARTING, ExampleMatcher.StringMatcher.ENDING or ExampleMatcher.StringMatcher.CONTAINING could return more results than anticipated when a maliciously crafted example value is supplied. CWE-155 CWE-200Jun 3, 2019	CVSS5.3v3.1	EPSS1.25%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX