Spring Spring Security
productEUA product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
EPSS ≥ 10%
0
critical
by severity
0critical6high4medium0low
updated 2026-10-28
01
vulnerabilities (21)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2025-22223US | — | Exploit |
| CVE-2026-22747US | high8.1 | Exploit |
| CVE-2019-3795US | medium5.3OT elevated | — |
| CVE-2019-11272US | high7.3 | — |
| CVE-2024-22234US | high7.4 | — |
| CVE-2025-41232US | — | — |
| CVE-2025-22228US | — | — |
| CVE-2025-22234US | — | — |
| CVE-2026-22733US | high8.1OT elevated | — |
| CVE-2026-40988US | — | — |
| CVE-2026-22754US | — | — |
| CVE-2026-22753US | — | — |
| CVE-2026-22746US | — | — |
| CVE-2026-41706US | — | — |
| CVE-2026-41003US | medium5.4 | — |
| CVE-2026-22748US | medium6.5 | — |
| CVE-2026-40993US | high7.2 | — |
| CVE-2026-41008US | — | — |
| CVE-2026-41694US | medium5.3 | — |
| CVE-2026-47838US | high8.1 | — |
| CVE-2026-22751US | — | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-287Improper Authentication3 CVEs
- CWE-693Protection Mechanism Failure3 CVEs
- CWE-208Observable Timing Discrepancy2 CVEs
- CWE-284Improper Access Control2 CVEs
- CWE-601URL Redirection to Untrusted Site ('Open Redirect')2 CVEs
- CWE-20Improper Input Validation1 CVEs
- CWE-255CWE-2551 CVEs
- CWE-288Authentication Bypass Using an Alternate Path or Channel1 CVEs
03
sources (1)
Which sources assert this record, and when.
- EUEU Vulnerability Database (ENISA)21 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan