How many Pivotal spring_security CVEs are in CISA KEV?

None of Pivotal spring_security's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Pivotal spring_security are affected?

24 distinct Pivotal spring_security versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Pivotal spring_security CVEs?

Pivotal spring_security's CVEs most often map to these CWE weakness types: CWE-329 (Generation of Predictable IV with CBC Mode), CWE-347 (Improper Verification of Cryptographic Signature), CWE-862 (Missing Authorization).

How many critical Pivotal spring_security vulnerabilities are there?

Pivotal spring_security has 1 critical and 6 high-severity CVEs.

What is the average severity of Pivotal spring_security CVEs?

The average CVSS base score across Pivotal spring_security's scored CVEs is 8.2.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

Pivotal

8 CVEs

Pivotal spring_security Vulnerabilities

Name: Pivotal spring_security vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for spring_security by Pivotal.

8

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

8.2

Avg CVSS

2017–2024

Last updated March 18, 2024

Overview

Pivotal spring_security has 8 published CVE records since 2017, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 8.2.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Pivotal spring_security, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Pivotal spring_security's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High6

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Pivotal spring_security's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No Pivotal spring_security CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Pivotal spring_security version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

3.1.0 to 3.1.51 CVE
3.2.0 to 3.2.11 CVE
3.2.x1 CVE
4.0.x1 CVE
4.1.01 CVE

Version ranges

5.2.0 <= v < 5.2.42 CVEs
5.3.0 <= v < 5.3.22 CVEs
< 5.2.91 CVE
>= 3.1 to 3.2.41 CVE
5.3.0 <= v < 5.3.81 CVE
5.7.0 <= v <= 5.7.111 CVE
5.8.0 <= v <= 5.8.101 CVE
6.0.0 <= v <= 6.0.91 CVE
6.1.0 <= v <= 6.1.71 CVE
6.2.0 <= v <= 6.2.21 CVE

Fixed in

5.2.42 CVEs
5.3.22 CVEs
> 5.7.111 CVE
> 5.8.101 CVE
> 6.0.91 CVE
> 6.1.71 CVE
> 6.2.21 CVE
5.2.91 CVE
5.3.81 CVE

Find a version

8 CVEs

Sort

High vulnerability · 2024-03-18
CVE-2024-22257
Patch
CWE-862
High · CVSS 8.2
EPSS 0.9% (57th pct)2024-03-18
High vulnerability · 2021-02-23
CVE-2021-22112
Patch
High · CVSS 8.8
EPSS 3.2% (87th pct)2021-02-23
Medium vulnerability · 2020-05-14
CVE-2020-5408
Patch
CWE-329
Medium · CVSS 6.5
EPSS 1.6% (73th pct)2020-05-14
High vulnerability · 2020-05-13
CVE-2020-5407
Patch
CWE-347
High · CVSS 8.8
EPSS 1.2% (65th pct)2020-05-13
High vulnerability · 2018-05-11
CVE-2018-1258
Patch
High · CVSS 8.8
EPSS 2.4% (82th pct)2018-05-11
High vulnerability · 2017-05-25
CVE-2016-5007
Patch
High · CVSS 7.5
EPSS 2.8% (85th pct)2017-05-25
Critical vulnerability · 2017-05-25
CVE-2014-3527
Patch
Critical · CVSS 9.8
EPSS 1.8% (76th pct)2017-05-25
High vulnerability · 2017-05-25
CVE-2014-0097
Patch
High · CVSS 7.3
EPSS 1.2% (65th pct)2017-05-25

Common weakness types

The CWE weakness categories most often found in Pivotal spring_security CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Pivotal spring_security CVEs were published each year.

2017

3

2018

1

2020

2

2021

1

2024

1

Other Pivotal products

Browse vulnerabilities for other products by Pivotal.

cloud foundry uaa32 CVEs cloud foundry elastic runtime30 CVEs cloud foundry18 CVEs spring framework16 CVEs rabbitmq12 CVEs operations manager11 CVEs Pivotal Application Service9 CVEs cloud foundry uaa-release8 CVEs

All Pivotal vulnerabilities

Frequently asked questions

Common questions about Pivotal spring_security vulnerabilities.

How many CVEs does Pivotal spring_security have?: Pivotal spring_security has 8 published CVE records since 2017.
How many Pivotal spring_security CVEs are in CISA KEV?: None of Pivotal spring_security's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Pivotal spring_security vulnerabilities?: No Pivotal spring_security CVEs currently have a tracked public exploit in this dataset.
Which versions of Pivotal spring_security are affected?: 24 distinct Pivotal spring_security versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Pivotal spring_security CVEs?: Pivotal spring_security's CVEs most often map to these CWE weakness types: CWE-329 (Generation of Predictable IV with CBC Mode), CWE-347 (Improper Verification of Cryptographic Signature), CWE-862 (Missing Authorization).
How many critical Pivotal spring_security vulnerabilities are there?: Pivotal spring_security has 1 critical and 6 high-severity CVEs.
What is the average severity of Pivotal spring_security CVEs?: The average CVSS base score across Pivotal spring_security's scored CVEs is 8.2.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Pivotal spring_security vulnerabilities

Monitor new Pivotal spring_security vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing