Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework/spring-oxm@5.2.2.RELEASE
purl pkg:maven/org.springframework/spring-oxm@5.2.2.RELEASE
Next non-vulnerable version 5.2.9.RELEASE
Latest non-vulnerable version 5.2.9.RELEASE
Risk score
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
CVE-2020-5397

Cross-Site Request Forgery (CSRF) Spring Framework is vulnerable to CSRF attacks through CORS preflight requests that target Spring MVC (spring-webmvc …
5.2.3.RELEASE
Vulnerable
CVE-2020-5421

Remote file disclosure In Spring Framework the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser …
4.3.29.RELEASE
Not vulnerable
5.0.19.RELEASE
Not vulnerable
5.1.18.RELEASE
Not vulnerable
5.2.9.RELEASE
Not vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
CVE-2015-3192
Pivotal Spring Framework before 3.2.14 and 4.x before 4.1.7 do not properly process inline DTD declarations when DTD is not …