Spring Framework vulnerabilities for UIM

Products

• DX Unified Infrastructure Management (Nimsoft / UIM)

Issue/Introduction

 

 

CVE-2016-5007

CVE-2016-9878

CVE-2015-0201

CVE-2015-3192

CVE-2015-5211

CVE-2014-0225

CVE-2014-3625

CVE-2020-5421

CVE-2018-1273

CVE-2022-22950 

 

Environment

Release : 20.4

 

1.UIM version. UIM 20.4 CU5

2.Spring framework version. 3.1.2

Resolution

development will be upgrading spring to v5.3.27 with release of UIM 20.4CU8. All these will be addressed with the upgrade to v5.3.27.