[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f1HxOKJ-2ZKXCIl7o0OseegO11enIAxLTkyRtqXC2UXQ":3,"g5a-ex:springsource\u002Fspring_framework@*":199,"g5a-family:springsource\u002Fspring_framework":201},{"success":4,"data":5},true,{"product":6,"versions":101,"topVulnerabilitiesByEpss":142,"kevVulnerabilities":176,"seoMetadata":177,"meta":196},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":100},"springsource","spring_framework",40,6,0,"2014-04-17",[14,18,20,22,24,26,28,30,32,35,37,39,41,43,45,47,50,52,54,56,59,61,64,66,68,70,72,74,76,78,80,82,84,86,88,90,92,94,96,98],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"1.1.0",1,false,{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},"2.0",{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},"2.0.1",{"version":23,"cve_count":16,"kev_count":11,"has_kev":17},"2.0.2",{"version":25,"cve_count":16,"kev_count":11,"has_kev":17},"2.0.3",{"version":27,"cve_count":16,"kev_count":11,"has_kev":17},"2.0.4",{"version":29,"cve_count":16,"kev_count":11,"has_kev":17},"2.0.5",{"version":31,"cve_count":16,"kev_count":11,"has_kev":17},"2.1",{"version":33,"cve_count":34,"kev_count":11,"has_kev":17},"2.5.0",3,{"version":36,"cve_count":34,"kev_count":11,"has_kev":17},"2.5.1",{"version":38,"cve_count":34,"kev_count":11,"has_kev":17},"2.5.2",{"version":40,"cve_count":34,"kev_count":11,"has_kev":17},"2.5.3",{"version":42,"cve_count":34,"kev_count":11,"has_kev":17},"2.5.4",{"version":44,"cve_count":34,"kev_count":11,"has_kev":17},"2.5.5",{"version":46,"cve_count":34,"kev_count":11,"has_kev":17},"2.5.6",{"version":48,"cve_count":49,"kev_count":11,"has_kev":17},"2.5.7",2,{"version":51,"cve_count":10,"kev_count":11,"has_kev":17},"3.0.0",{"version":53,"cve_count":34,"kev_count":11,"has_kev":17},"3.0.0.m1",{"version":55,"cve_count":34,"kev_count":11,"has_kev":17},"3.0.0.m2",{"version":57,"cve_count":58,"kev_count":11,"has_kev":17},"3.0.1",5,{"version":60,"cve_count":58,"kev_count":11,"has_kev":17},"3.0.2",{"version":62,"cve_count":63,"kev_count":11,"has_kev":17},"3.0.3",4,{"version":65,"cve_count":63,"kev_count":11,"has_kev":17},"3.0.4",{"version":67,"cve_count":34,"kev_count":11,"has_kev":17},"3.0.5",{"version":69,"cve_count":11,"kev_count":11,"has_kev":17},"3.0.6",{"version":71,"cve_count":11,"kev_count":11,"has_kev":17},"3.0.7",{"version":73,"cve_count":11,"kev_count":11,"has_kev":17},"3.1.0",{"version":75,"cve_count":11,"kev_count":11,"has_kev":17},"3.1.1",{"version":77,"cve_count":11,"kev_count":11,"has_kev":17},"3.1.2",{"version":79,"cve_count":11,"kev_count":11,"has_kev":17},"3.1.3",{"version":81,"cve_count":11,"kev_count":11,"has_kev":17},"3.1.4",{"version":83,"cve_count":11,"kev_count":11,"has_kev":17},"3.2.0",{"version":85,"cve_count":11,"kev_count":11,"has_kev":17},"3.2.1",{"version":87,"cve_count":11,"kev_count":11,"has_kev":17},"3.2.2",{"version":89,"cve_count":11,"kev_count":11,"has_kev":17},"3.2.3",{"version":91,"cve_count":11,"kev_count":11,"has_kev":17},"3.2.4",{"version":93,"cve_count":16,"kev_count":11,"has_kev":17},"3.2.5",{"version":95,"cve_count":16,"kev_count":11,"has_kev":17},"3.2.6",{"version":97,"cve_count":16,"kev_count":11,"has_kev":17},"4.0.0",{"version":99,"cve_count":16,"kev_count":11,"has_kev":17},"4.0.1","Spring Framework by Springsource is a technology product with 40 tracked versions and 6 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},{"version":23,"cve_count":16,"kev_count":11,"has_kev":17},{"version":25,"cve_count":16,"kev_count":11,"has_kev":17},{"version":27,"cve_count":16,"kev_count":11,"has_kev":17},{"version":29,"cve_count":16,"kev_count":11,"has_kev":17},{"version":31,"cve_count":16,"kev_count":11,"has_kev":17},{"version":33,"cve_count":34,"kev_count":11,"has_kev":17},{"version":36,"cve_count":34,"kev_count":11,"has_kev":17},{"version":38,"cve_count":34,"kev_count":11,"has_kev":17},{"version":40,"cve_count":34,"kev_count":11,"has_kev":17},{"version":42,"cve_count":34,"kev_count":11,"has_kev":17},{"version":44,"cve_count":34,"kev_count":11,"has_kev":17},{"version":46,"cve_count":34,"kev_count":11,"has_kev":17},{"version":48,"cve_count":49,"kev_count":11,"has_kev":17},{"version":51,"cve_count":10,"kev_count":11,"has_kev":17},{"version":53,"cve_count":34,"kev_count":11,"has_kev":17},{"version":55,"cve_count":34,"kev_count":11,"has_kev":17},{"version":57,"cve_count":58,"kev_count":11,"has_kev":17},{"version":60,"cve_count":58,"kev_count":11,"has_kev":17},{"version":62,"cve_count":63,"kev_count":11,"has_kev":17},{"version":65,"cve_count":63,"kev_count":11,"has_kev":17},{"version":67,"cve_count":34,"kev_count":11,"has_kev":17},{"version":69,"cve_count":11,"kev_count":11,"has_kev":17},{"version":71,"cve_count":11,"kev_count":11,"has_kev":17},{"version":73,"cve_count":11,"kev_count":11,"has_kev":17},{"version":75,"cve_count":11,"kev_count":11,"has_kev":17},{"version":77,"cve_count":11,"kev_count":11,"has_kev":17},{"version":79,"cve_count":11,"kev_count":11,"has_kev":17},{"version":81,"cve_count":11,"kev_count":11,"has_kev":17},{"version":83,"cve_count":11,"kev_count":11,"has_kev":17},{"version":85,"cve_count":11,"kev_count":11,"has_kev":17},{"version":87,"cve_count":11,"kev_count":11,"has_kev":17},{"version":89,"cve_count":11,"kev_count":11,"has_kev":17},{"version":91,"cve_count":11,"kev_count":11,"has_kev":17},{"version":93,"cve_count":16,"kev_count":11,"has_kev":17},{"version":95,"cve_count":16,"kev_count":11,"has_kev":17},{"version":97,"cve_count":16,"kev_count":11,"has_kev":17},{"version":99,"cve_count":16,"kev_count":11,"has_kev":17},[143,150,155,160,167,171],{"cveId":144,"description":145,"publishedDate":12,"cvssScore":146,"cvssVersion":147,"severity":148,"isKev":17,"epssScore":149},"CVE-2014-0054","The Jaxb2RootElementHttpMessageConverter in Spring MVC in Spring Framework before 3.2.8 and 4.0.0 before 4.0.2 does not disable external entity resolution, which allows remote attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via crafted XML, aka an XML External Entity (XXE) issue.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-4152, CVE-2013-7315, and CVE-2013-6429.",6.8,"v2","Medium",0.91354,{"cveId":151,"description":152,"publishedDate":153,"cvssScore":10,"cvssVersion":147,"severity":148,"isKev":17,"epssScore":154},"CVE-2010-1622","SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote attackers to execute arbitrary code via an HTTP request containing class.classLoader.URLs[0]=jar: followed by a URL of a crafted .jar file.","2010-06-21",0.52003,{"cveId":156,"description":157,"publishedDate":158,"cvssScore":146,"cvssVersion":147,"severity":148,"isKev":17,"epssScore":159},"CVE-2013-4152","The Spring OXM wrapper in Spring Framework before 3.2.4 and 4.0.0.M1, when using the JAXB marshaller, does not disable entity resolution, which allows context-dependent attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via an XML external entity declaration in conjunction with an entity reference in a (1) DOMSource, (2) StAXSource, (3) SAXSource, or (4) StreamSource, aka an XML External Entity (XXE) issue.","2014-01-23",0.25634,{"cveId":161,"description":162,"publishedDate":163,"cvssScore":164,"cvssVersion":147,"severity":165,"isKev":17,"epssScore":166},"CVE-2011-2730","VMware SpringSource Spring Framework before 2.5.6.SEC03, 2.5.7.SR023, and 3.x before 3.0.6, when a container supports Expression Language (EL), evaluates EL expressions in tags twice, which allows remote attackers to obtain sensitive information via a (1) name attribute in a (a) spring:hasBindErrors tag; (2) path attribute in a (b) spring:bind or (c) spring:nestedpath tag; (3) arguments, (4) code, (5) text, (6) var, (7) scope, or (8) message attribute in a (d) spring:message or (e) spring:theme tag; or (9) var, (10) scope, or (11) value attribute in a (f) spring:transform tag, aka \"Expression Language Injection.\"","2012-12-05",7.5,"High",0.11779,{"cveId":168,"description":169,"publishedDate":158,"cvssScore":146,"cvssVersion":147,"severity":148,"isKev":17,"epssScore":170},"CVE-2013-7315","The Spring MVC in Spring Framework before 3.2.4 and 4.0.0.M1 through 4.0.0.M2 does not disable external entity resolution for the StAX XMLInputFactory, which allows context-dependent attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via crafted XML with JAXB, aka an XML External Entity (XXE) issue, and a different vulnerability than CVE-2013-4152.  NOTE: this issue was SPLIT from CVE-2013-4152 due to different affected versions.",0.05065,{"cveId":172,"description":173,"publishedDate":174,"cvssScore":58,"cvssVersion":147,"severity":148,"isKev":17,"epssScore":175},"CVE-2009-1190","Algorithmic complexity vulnerability in the java.util.regex.Pattern.compile method in Sun Java Development Kit (JDK) before 1.6, when used with spring.jar in SpringSource Spring Framework 1.1.0 through 2.5.6 and 3.0.0.M1 through 3.0.0.M2 and dm Server 1.0.0 through 1.0.2, allows remote attackers to cause a denial of service (CPU consumption) via serializable data with a long regex string containing multiple optional groups, a related issue to CVE-2004-2540.","2009-04-27",0.02796,[],{"title":178,"metaDescription":179,"keywords":180,"structuredData":181},"Spring Framework by Springsource - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Spring Framework by Springsource covering 40 versions with 6 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Spring Framework vulnerabilities, Spring Framework security, Spring Framework CVE, Springsource Spring Framework, Spring Framework threat intelligence, Springsource security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":182,"@type":183,"name":184,"description":179,"url":185,"manufacturer":186,"applicationCategory":190,"softwareVersion":191,"mainEntity":192},"https:\u002F\u002Fschema.org","SoftwareApplication","Spring Framework","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fspringsource\u002Fspring_framework",{"@type":187,"name":188,"url":189},"Organization","Springsource","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fspringsource","Security Software","40 versions tracked",{"@type":193,"name":194,"description":195,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Spring Framework Security Vulnerabilities","Security vulnerabilities affecting Spring Framework by Springsource",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":197,"apiVersion":198},"2026-10-17T13:08:28.416Z","3.0",{"rows":200,"total":11,"capped":17,"failed":11},[],[]]