Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework/spring-oxm@4.2.7.RELEASE
purl pkg:maven/org.springframework/spring-oxm@4.2.7.RELEASE
Next non-vulnerable version 4.2.9.RELEASE
Latest non-vulnerable version 5.2.9.RELEASE
Risk score
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
CVE-2020-5421

Remote file disclosure In Spring Framework the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser …
4.3.29.RELEASE
Not vulnerable
5.0.19.RELEASE
Not vulnerable
5.1.18.RELEASE
Not vulnerable
5.2.9.RELEASE
Not vulnerable
Vulnerabilities fixed by this package (4)

Advisory Summary Aliases
CVE-2014-0225
When processing user provided XML documents, the Spring Framework 4.0.0 to 4.0.4, 3.0.0 to 3.2.8, and possibly earlier unsupported versions …
CVE-2014-0054
The Jaxb2RootElementHttpMessageConverter in Spring MVC in Spring Framework before 3.2.8 and 4.0.0 before 4.0.2 does not disable external entity resolution, …
CVE-2015-3192
Pivotal Spring Framework before 3.2.14 and 4.x before 4.1.7 do not properly process inline DTD declarations when DTD is not …
CVE-2014-3578
Directory traversal vulnerability in Pivotal Spring Framework 3.x before 3.2.9 and 4.0 before 4.0.5 allows remote attackers to read arbitrary …