Maven org.springframework.security.oauth:spring-security-oauth2

Name: Maven org.springframework.security.oauth:spring-security-oauth2
Brand: Maven

productUS

pkg:maven/org.springframework.security.oauth/spring-security-oauth2

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

unpatched

by severity

1critical2high2medium0low

updated 2026-10-27

vulnerabilities (5)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2016-4977US	high8.8	79.2% (100th)	Exploit	1.0.5	2017-05-25	2 versions
CVE-2019-3778US	medium6.5	16.6% (97th)	Exploit	2.2.4.RELEASE	2019-03-07	4 versions
CVE-2018-1260US	critical9.8	10.6% (96th)	Exploit	2.3.3	2018-05-11	5 versions
CVE-2018-15758US	high8.1	2.15% (82nd)	—	2.2.3.RELEASE	2018-10-18	4 versions
CVE-2022-22969US	medium6.5	1.25% (69th)	—	2.5.2.RELEASE	2022-04-21	2 versions

The flaw types (CWEs) most of these CVEs share.

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.