Vendor
spring by vmware
On CISA KEV1Public exploit3Avg CVSS6.8
CVEs in the catalog
10
since 2020-03
Months in the top 100
7
months with a stored rank
Best rank
#39
one month recomputed
Affected scope
Products and weakness classes
Products
| Product | CVEs | Share |
|---|---|---|
| spring cloud config | 2 | 20% |
| spring security | 2 | 20% |
| spring batch | 1 | 10% |
| spring cloud data flow | 1 | 10% |
| spring cloud netflix | 1 | 10% |
| spring cloud task | 1 | 10% |
| spring framework | 1 | 10% |
| spring integration | 1 | 10% |
Weakness classes
| Weakness | CVEs | Share |
|---|---|---|
| CWE-23 | 2 | 20% |
| CWE-502 | 2 | 20% |
| CWE-89 | 2 | 20% |
| CWE-329 | 1 | 10% |
| CWE-347 | 1 | 10% |
| CWE-441 | 1 | 10% |
Latest CVEs
10 most recently published
Enriched records open their full page; the rest open their catalog record.
| CVE | Weakness | Signals | CVSS | Published |
|---|---|---|---|---|
| CVE-2020-5428 | CWE-89 | none yet | 5.1 | 2021-01-27 |
| CVE-2020-5427 | CWE-89 | none yet | 5.7 | 2021-01-27 |
| CVE-2020-5421 | n/a | 1 | 8.7 | 2020-09-19 |
| CVE-2020-5412 | CWE-441 | none yet | n/a | 2020-08-07 |
| CVE-2020-5413 | CWE-502 | none yet | n/a | 2020-07-31 |
| CVE-2020-5411 | CWE-502 | none yet | n/a | 2020-06-11 |
| CVE-2020-5410 | CWE-23 | 1 | 7.5 | 2020-06-02 |
| CVE-2020-5408 | CWE-329 | none yet | n/a | 2020-05-14 |
| CVE-2020-5407 | CWE-347 | none yet | n/a | 2020-05-13 |
| CVE-2020-5405 | CWE-23 | 1 | n/a | 2020-03-05 |