What are the most common weakness types in spring-projects org.springframework:spring-webmvc CVEs?

spring-projects org.springframework:spring-webmvc's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-400 (Uncontrolled Resource Consumption), CWE-524 (Use of Cache Containing Sensitive Information).

spring-projects org.springframework:spring-webmvc Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: spring-projects org.springframework:spring-webmvc vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

spring-projects org.springframework:spring-webmvc Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

spring-projects org.springframework:spring-webmvc has 25 published CVE records since 2014, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 6.5.

Severity and exploitation

How the CVSS severity of spring-projects org.springframework:spring-webmvc's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical4

High7

Medium12

Low2

In CISA’s Known Exploited Vulnerabilities catalog

One of spring-projects org.springframework:spring-webmvc's CVEs is confirmed exploited in the wild.

Public exploits

2 of spring-projects org.springframework:spring-webmvc's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every spring-projects org.springframework:spring-webmvc version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

6.1.0 <= v <= 6.1.218 CVEs
<= 5.3.397 CVEs
6.2.0 <= v < 6.2.197 CVEs
7.0.0 <= v < 7.0.87 CVEs
5.3.0 <= v <= 5.3.393 CVEs
<= 5.3.472 CVEs
6.0.0 <= v <= 6.1.212 CVEs
6.1.0 <= v <= 6.1.262 CVEs
6.2.0 <= v < 6.2.172 CVEs
6.2.0 <= v < 6.2.182 CVEs
6.2.0 <= v <= 6.2.192 CVEs

Common weakness types

The CWE weakness categories most often found in spring-projects org.springframework:spring-webmvc CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many spring-projects org.springframework:spring-webmvc CVEs were published each year.

2014

2016

2020

2022

2023

2024

2025

Other spring-projects products

Browse vulnerabilities for other products by spring-projects.

spring-framework66 CVEs spring-security48 CVEs spring-ai23 CVEs org.springframework.security:spring-security-core20 CVEs org.springframework:spring-webflux20 CVEs spring-boot19 CVEs spring-integration17 CVEs

Frequently asked questions

Common questions about spring-projects org.springframework:spring-webmvc vulnerabilities.

How many CVEs does spring-projects org.springframework:spring-webmvc have?: spring-projects org.springframework:spring-webmvc has 25 published CVE records since 2014.
How many spring-projects org.springframework:spring-webmvc CVEs are in CISA KEV?: Yes — 1 of spring-projects org.springframework:spring-webmvc's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for spring-projects org.springframework:spring-webmvc vulnerabilities?: Yes — 2 of spring-projects org.springframework:spring-webmvc's CVEs have a known public exploit.
Which versions of spring-projects org.springframework:spring-webmvc are affected?: 72 distinct spring-projects org.springframework:spring-webmvc versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in spring-projects org.springframework:spring-webmvc CVEs?: spring-projects org.springframework:spring-webmvc's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-400 (Uncontrolled Resource Consumption), CWE-524 (Use of Cache Containing Sensitive Information).
How many critical spring-projects org.springframework:spring-webmvc vulnerabilities are there?: spring-projects org.springframework:spring-webmvc has 4 critical and 7 high-severity CVEs.
What is the average severity of spring-projects org.springframework:spring-webmvc CVEs?: The average CVSS base score across spring-projects org.springframework:spring-webmvc's scored CVEs is 6.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track spring-projects org.springframework:spring-webmvc vulnerabilities

Get an alert for each new spring-projects org.springframework:spring-webmvc CVE, with AI-written analysis and remediation steps.

Create an account See pricing