Vendor/product archive

vmware / spring_integration CVEs

Beta · best-effort

2 CVEs tagged to vmware / spring_integration — 2 Critical, 0 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to vmware vendor archive

CVE-2020-5413

Published Jul 31, 2020

Spring Integration framework provides Kryo Codec implementations as an alternative for Java (de)serialization. When Kryo is configured with default options, all unregistered class…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2019-3772

Published Jan 18, 2019

Spring Integration (spring-integration-xml and spring-integration-ws modules), versions 4.3.18, 5.0.10, 5.1.1, and older unsupported versions, were susceptible to XML External Ent…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1