VendorsBroadcomspring_authorization_serverany version
Vulnerabilities

Broadcom (VMware) Spring Authorization Server any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2026-22752
Spring Security Authorization Server Dynamic Client Registration endpoints perform insufficient validation of client metadata
Published 2026-07-16 · Analyzed
9.6EPSS 0.005
CVE-2026-59316
Spring Authorization Server Default Consent Page is vulnerable to Cross-Site Scripting (XSS)
Published 2026-08-27 · Analyzed
8.2EPSS 0.002
CVE-2026-59355
Spring Authorization Server: Open Redirect via request_uri parameter
Published 2026-08-27 · Analyzed
6.1EPSS 0.002
CVE-2026-41008
Spring Security Authorization Server Open Redirect via request_uri
Published 2026-06-09 · Analyzed
6.1EPSS 0.002