Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework/spring-oxm@5.0.5.RELEASE
purl pkg:maven/org.springframework/spring-oxm@5.0.5.RELEASE
Next non-vulnerable version 5.0.19.RELEASE
Latest non-vulnerable version 5.2.9.RELEASE
Risk score
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
CVE-2020-5421

Remote file disclosure In Spring Framework the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser …
4.3.29.RELEASE
Not vulnerable
5.0.19.RELEASE
Not vulnerable
5.1.18.RELEASE
Not vulnerable
5.2.9.RELEASE
Not vulnerable
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
CVE-2014-0054
The Jaxb2RootElementHttpMessageConverter in Spring MVC in Spring Framework before 3.2.8 and 4.0.0 before 4.0.2 does not disable external entity resolution, …
CVE-2015-3192
Pivotal Spring Framework before 3.2.14 and 4.x before 4.1.7 do not properly process inline DTD declarations when DTD is not …