Broadcom
Broadcom Spring Batch: vulnerabilidades y CVE
Broadcom Spring Batch tiene 5 vulnerabilidades publicadas, 3 de ellas en los últimos 12 meses. 2 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE5
Últimos 12 meses3
Críticas2
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-47881 | Alta (7.5) | 0.40% | — | 27 ago 2026 | Spring Batch's FlatFileItemReader supports files where a single logical record spans multiple physical lines — for example, a CSV field that contains embedded newlines wrapped in quotes. A specially crafted input file… |
| CVE-2026-47878 | Alta (7.3) | 0.35% | — | 27 ago 2026 | DefaultExecutionContextSerializer, used by default in Spring Batch's JDBC job repository, passes Base64-decoded bytes directly to ObjectInputStream.readObject() without an ObjectInputFilter that restricts types to a… |
| CVE-2026-47875 | Crítica (9.8) | 0.43% | — | 27 ago 2026 | Applications that deserialize execution contexts with Jackson2ExecutionContextStringSerializer are vulnerable to a deserialization attack if they use an untrusted data source for the job repository. The… |
| CVE-2020-5411 | Alta (8.1) | 1.7% | — | 11 jun 2020 | When configured to enable default typing, Jackson contained a deserialization vulnerability that could lead to arbitrary code execution. Jackson fixed this vulnerability by blacklisting known "deserialization gadgets".… |
| CVE-2019-3774 | Crítica (9.8) | 3.0% | — | 18 ene 2019 | Spring Batch versions 3.0.9, 4.0.1, 4.1.0, and older unsupported versions, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.
Otros productos de Broadcom
Fabric Operating System · 95Brocade Sannav · 54Tcpreplay · 52Brightstor Arcserve Backup · 41Brocade Fabric Operating System Firmware · 26Rabbitmq Server · 25Raid Controller WEB Interface · 22Sannav · 20Brightstor Enterprise Backup · 19Advanced Secure Gateway · 16Business Protection Suite · 16Etrust Antivirus · 16