VendorsBroadcomspring_web_servicesany version
Vulnerabilities

Broadcom Spring Web Services any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

8CVEs
CVE-2019-3773
Spring Web Services XML External Entity Injection (XXE)
Published 2019-01-18 · Modified
9.8EPSS 0.041
CVE-2026-40999
Spring WS SSRF via unvalidated WS-Addressing reply destinations
Published 2026-06-11 · Analyzed
8.6EPSS 0.004
CVE-2026-40998
Jaxp13 XPath XXE via StreamSource and SAXSource
Published 2026-06-11 · Analyzed
8.2EPSS 0.004
CVE-2026-40994
Wss4jSecurityInterceptor disables WS-I BSP validation by default
Published 2026-06-11 · Analyzed
8.2EPSS 0.003
CVE-2026-40995
X.509 authentication bypasses Spring Security account checks
Published 2026-06-11 · Analyzed
5.4EPSS 0.002
CVE-2026-40997
SOAP security faults leak Spring Security account state
Published 2026-06-11 · Undergoing Analysis
5.3EPSS 0.005
CVE-2026-40996
Inbound WS-Security allows RSA PKCS#1 v1.5 key transport by default
Published 2026-06-11 · Analyzed
4.8EPSS 0.001
CVE-2026-41000
WSS4J validation does not use configured replay cache
Published 2026-06-11 · Analyzed
3.7EPSS 0.003