VMware Spring Framework vulnerabilities
7 published CVEs name VMware Spring Framework among the affected products.
- 7Published CVEs7 of them scored
- 3Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-22745
CVE-2026-22745 : Denial of service in static resource handling on Windows platforms
VMware · Spring Framework
Medium5.3 - CVE-2026-22741
Static resource cache poisoning in Spring MVC and WebFlux
VMware · Spring Framework
Low3.1 - CVE-2026-22740
Spring Framework DoS with Multipart Temp Files in WebFlux
VMware · Spring Framework
Medium6.5 - CVE-2025-41254
Spring Framework STOMP CSRF Vulnerability
VMware · Spring Framework
Medium4.3 - CVE-2025-41249
CVE-2025-41249: Spring Framework Annotation Detection Vulnerability
VMware · Spring Framework
High7.5 - CVE-2025-41242
CVE-2025-41242: Path traversal vulnerability on non-compliant Servlet containers
VMware · Spring Framework
Medium5.9 - CVE-2025-41234
RFD Attack via “Content-Disposition” Header Sourced from Request
VMware · Spring Framework
Medium6.5