Skip to content
OpenAdvisories

Product · Spring

Spring Web Services

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.6
    CVE-2026-40999

    Spring WS SSRF via unvalidated WS-Addressing reply destinations

    When WS-Addressing is used with non-anonymous ReplyTo or FaultTo addresses, Spring WS may initiate outbound connections through configured WebServiceMessageSender instances to destinations taken directly from request headers without verifying that those desti…

    Spring Spring Web Services org.springframework.ws:spring-ws-core Maven
  • High 8.2
    CVE-2026-40998

    Jaxp13 XPath XXE via StreamSource and SAXSource

    Jaxp13XPathTemplate evaluated XPath expressions for StreamSource and SAXSource inputs using a code path that parsed attacker-controlled XML with the JDK's default DocumentBuilderFactory behavior instead of Spring's hardened parser configuration. Applications …

    Spring Spring Web Services org.springframework.ws:spring-xml Maven
  • High 8.2
    CVE-2026-40994

    Wss4jSecurityInterceptor disables WS-I BSP validation by default

    Wss4jSecurityInterceptor initialized its BSP (WS-I Basic Security Profile) compliance flag so that inbound validation disabled WSS4J BSP enforcement on RequestData. Services that validate WS-Security on the network could therefore accept messages that violate…

    Spring Spring Web Services org.springframework.ws:spring-ws-security its Ubuntu Maven