| Package | Affected versions | Patched versions |
|---|---|---|
| org.springframework.ws:spring-ws | ≥ 3.0.0, < 3.0.6< 2.4.4 | 3.0.62.4.4 |
| org.springframework.ws:spring-xml | ≥ 3.0.0, < 3.0.6< 2.4.4 | 3.0.62.4.4 |
| spring web services | ≥ 3.0.0, ≤ 3.0.4≤ 2.4.3 | |
| financial services analytical applications infrastructure | ≥ 8.0.6, ≤ 8.1.0 | |
| flexcube private banking | = 12.0.0= 12.1.0 |
Spring Web Services, versions 2.4.3, 3.0.4, and older unsupported versions of all three projects, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free