Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:*

2 briefs RSS
low advisory

Security Constraint Bypass in VMware Tanzu Spring Framework

A vulnerability in VMware Tanzu Spring Framework identified as CVE-2024-38816 allows a remote, unauthenticated attacker to bypass security restrictions.

Spring Framework vulnerability web-framework patch-management
1c
high advisory

Multiple Vulnerabilities in VMware Tanzu Spring Security

Multiple vulnerabilities in VMware Tanzu Spring Security, tracked as CVE-2024-22259 and CVE-2024-22262, allow remote attackers to perform file manipulation, information disclosure, cross-site scripting (XSS), and security control bypass.

Tanzu Spring Security vulnerability web-security
2c