Threat database

4 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	6.3	EPSS 0.4%	CVE-2024-40542my-springsecurity-plus · n/a Medium6.3EPSS 0.4%2024-07-12CVE Database V5CVE-2024-40542 my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/role?offset. EPSS 0.4%Vulnerability	CVE Database V5	2024-07-12
Medium	6.2	EPSS 0.4%	CVE-2024-40541my-springsecurity-plus · n/a Medium6.2EPSS 0.4%2024-07-12CVE Database V5CVE-2024-40541 my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/dept/build. EPSS 0.4%Vulnerability	CVE Database V5	2024-07-12
Medium	6.2	EPSS 0.5%	CVE-2024-40540my-springsecurity-plus · n/a Medium6.2EPSS 0.5%2024-07-12CVE Database V5CVE-2024-40540 my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/dept. EPSS 0.5%Vulnerability	CVE Database V5	2024-07-12
Medium	6.2	EPSS 0.5%	CVE-2024-40539my-springsecurity-plus · n/a Medium6.2EPSS 0.5%2024-07-12CVE Database V5CVE-2024-40539 my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/user. EPSS 0.5%Vulnerability	CVE Database V5	2024-07-12

Page 1 of 1