Pivotal Software Spring Security Oauth — known CVE vulnerabilities

Every CVE whose affected-product data names Pivotal Software Spring Security Oauth, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2018-1260 — CVSS 9.8 (critical): Spring Security OAuth, versions 2.3 prior to 2.3.3, 2.2 prior to 2.2.2, 2.1 prior to 2.1.2, 2.0 prior to 2.0.15 and older unsupported…
• CVE-2018-15758 — CVSS 9.6 (critical): Spring Security OAuth, versions 2.3 prior to 2.3.4, and 2.2 prior to 2.2.3, and 2.1 prior to 2.1.3, and 2.0 prior to 2.0.16, and older…
• CVE-2019-3778 — CVSS 6.5 (medium): Spring Security OAuth, versions 2.3 prior to 2.3.5, and 2.2 prior to 2.2.4, and 2.1 prior to 2.1.4, and 2.0 prior to 2.0.17, and older…
• CVE-2019-11269 — CVSS 5.4 (medium): Spring Security OAuth versions 2.3 prior to 2.3.6, 2.2 prior to 2.2.5, 2.1 prior to 2.1.5, and 2.0 prior to 2.0.18, as well as older…