Pivotal Software Inc. Spring Framework

Name: Pivotal Software Inc. Spring Framework
Brand: Pivotal Software Inc.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

4critical7high9medium0low

updated 2026-10-28

vulnerabilities (28)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-22965US	critical9.8OT critical	99.6% (100th)	KEV	no fix	2022-04-01	2 versions
CVE-2020-5398US	high7.5OT high	88.3% (100th)	Exploit	no fix	2020-01-17	7 versions
CVE-2018-1270US	critical9.8	77.5% (100th)	Exploit	no fix	2018-04-06	3 versions
CVE-2024-38819US	—	56.0% (99th)	Exploit	no fix	2024-12-19	3 versions
CVE-2010-1622US	medium6.0	52.0% (99th)	Exploit	no fix	2010-06-21	3 versions
CVE-2016-1000027US	critical9.8	33.2% (98th)	Exploit	no fix	2020-01-02	≤ 4.1.4
CVE-2024-38816US	—	21.3% (98th)	Exploit	no fix	2024-09-13	3 versions
CVE-2020-5421US	medium6.5	11.6% (96th)	Exploit	no fix	2020-09-19	4 versions
CVE-2024-22243US	—	3.97% (90th)	Exploit	no fix	2024-02-23	3 versions
CVE-2022-22971US	medium6.5	3.17% (88th)	Exploit	no fix	2022-05-12	2 versions
CVE-2024-38821US	—	1.74% (78th)	Exploit	no fix	2024-10-28	6 versions
CVE-2024-22262US	—	1.19% (68th)	Exploit	no fix	2024-04-16	3 versions
CVE-2018-1275US	critical9.8	57.4% (99th)	—	no fix	2018-04-11	2 versions
CVE-2022-22950US	medium6.5	36.1% (98th)	—	no fix	2022-04-01	≤ 5.3.17
CVE-2018-15756US	high7.5	9.21% (95th)	—	no fix	2018-10-18	3 versions
CVE-2018-11040US	high7.5	3.23% (88th)	—	no fix	2018-06-25	2 versions
CVE-2018-1257US	medium6.5	3.02% (87th)	—	no fix	2018-05-11	2 versions
CVE-2018-11039US	medium5.9	2.77% (86th)	—	no fix	2018-06-25	2 versions
CVE-2024-22259US	—	2.57% (85th)	—	no fix	2024-03-16	3 versions
CVE-2020-5397US	medium5.3	2.55% (85th)	—	no fix	2020-01-17	5.2.0 → 5.2.3
CVE-2018-1258US	high8.8OT elevated	2.46% (84th)	—	no fix	2018-05-11	≤ 5.0.5
CVE-2023-34053US	high7.5	1.16% (67th)	—	no fix	2023-11-28	6.0.0 → 6.0.13
CVE-2023-20863US	medium6.5	1.12% (66th)	—	no fix	2023-04-13	3 versions
CVE-2024-22233US	high7.5	1.05% (64th)	—	no fix	2024-01-22	2 versions
CVE-2023-20861US	medium6.5	0.97% (62nd)	—	no fix	2023-03-23	3 versions
CVE-2024-38809US	—	0.85% (58th)	—	no fix	2024-09-27	3 versions
CVE-2024-38808US	—	0.57% (47th)	—	no fix	2024-08-20	5.3.0 → 5.3.38
CVE-2021-22118US	high7.8	0.38% (32nd)	—	no fix	2021-05-27	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-770Allocation of Resources Without Limits or Throttling6 CVEs
CWE-20Improper Input Validation5 CVEs
CWE-400Uncontrolled Resource Consumption5 CVEs
CWE-404Improper Resource Shutdown or Release5 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')4 CVEs
CWE-601URL Redirection to Untrusted Site ('Open Redirect')3 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-269Improper Privilege Management2 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)28 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan