CVE-20XX-?
agent?

VMware Spring Security CVEs.

Published CVEs affecting VMware Spring Security, ranked by exploit odds.

1 CVEs · updated 2026-11-06 21:21 UTC

Reset all
  1. CVE-2026-40993

    An attacker with write permissions to the database table managed by JdbcAssertingPartyMetadataRepository (saml2_asserting_party_metadata) may be able to store malicious serialized payloads in the columns containing the collection of verification or encryption credentials (verification_credentials and encryption_credentials, respectively). Affected versions: Spring Security 7.0.0 through 7.0.5.

    Code execution Server VMware Spring Security

    7.3 HIGH 0.2% exploit odds Fix listed

All CVEs affecting VMware Spring Security that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.