CVE security advisories and vulnerability history for Spring Security by Spring.
33
Total CVEs
Published
0
In CISA KEV
Exploited in the wild
0
Public exploits
PoC or exploit code
6.9
Avg CVSS
2018–2026
Last updated
Overview
Spring Security has 33 published CVE records since 2018, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.9.
Severity and exploitation
How the CVSS severity of Spring Security's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical2
High16
Medium14
Low1
In CISA’s Known Exploited Vulnerabilities catalog
0
None of Spring Security's CVEs are currently listed in CISA's KEV catalog.
Public exploits
0
No Spring Security CVEs currently have a tracked public exploit.
Affected versions and CVEs
Browse every Spring Security version named in a CVE, then pick one to see only the CVEs that affect it.
Specific versions
5.7.161 CVE
5.8.181 CVE
6.0.161 CVE
6.1.141 CVE
6.2.101 CVE
6.3.81 CVE
6.4.41 CVE
Version ranges
>= 7.1.07 CVEs
7.0.0 <= v < 7.0.5.16 CVEs
7.0.0 <= v <= 7.0.46 CVEs
7.0.0 <= v <= 7.0.66 CVEs
Common weakness types
The CWE weakness categories most often found in Spring Security CVEs. Follow any weakness for its full explanation.
Common questions about Spring Security vulnerabilities.
How many CVEs does Spring Spring Security have?
Spring Spring Security has 33 published CVE records since 2018.
How many Spring Spring Security CVEs are in CISA KEV?
None of Spring Spring Security's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Spring Spring Security vulnerabilities?
No Spring Spring Security CVEs currently have a tracked public exploit in this dataset.
Which versions of Spring Spring Security are affected?
90 distinct Spring Spring Security versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Spring Spring Security CVEs?
Spring Spring Security's CVEs most often map to these CWE weakness types: CWE-287 (Improper Authentication), CWE-208 (Observable Timing Discrepancy), CWE-693 (Protection Mechanism Failure), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).
How many critical Spring Spring Security vulnerabilities are there?
Spring Spring Security has 2 critical and 16 high-severity CVEs.
What is the average severity of Spring Spring Security CVEs?
The average CVSS base score across Spring Spring Security's scored CVEs is 6.9.
