Approved changes feed: RSS · Atom

cpe:2.3:a:spring:spring_web_services:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSpring (4c7a31af-cbd7-516f-b1ce-2d5f574797bc)
ProductSpring Web Services (2c0f2c1b-7c84-502c-bcc3-108ee340bdbe)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-3773 vulnerable 2026-06-03 14:40:27.438053 Spring Web Services XML External Entity Injection (XXE)
Spring Web Services, versions 2.4.3, 3.0.4, and older unsupported versions of all three projects, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.
Published: 2019-01-18T22:00:00.000Z
Updated: 2024-09-17T03:33:35.558Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.