Skip to content
OpenAdvisories

Product · VMware

Spring Framework

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2025-41249 Public exploit

    CVE-2025-41249: Spring Framework Annotation Detection Vulnerability

    The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue if such annotations are used for authorization decisions…

    VMware Spring Framework libspring-java libspring-java Debian Ubuntu Maven
  • Medium 5.9
    CVE-2025-41242 Public exploit

    CVE-2025-41242: Path traversal vulnerability on non-compliant Servlet containers

    Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container. An application can be vulnerable when all the following are true: * the application is deployed as a WAR or with an emb…

    VMware Spring Framework libspring-java libspring-java Debian Ubuntu Maven