We found outdated Springs framework libraries of version 4.0.7 and 5.2.5 in the following applications
Please, ensure replacement of the outdated and vulnerable versions with a newer version (>=5.2.25 or >=5.3.34, there is no acceptable candidate in in the 4.x.x version of the framework)
Identity Manager 14.4 / 14.5
Sprint framework libraries are updated in Identity Manager release v14.5.1