Broadcom Spring Batch
5 CVEs affecting Broadcom Spring Batch. Latest disclosed: 2026-08-27. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-3774 | Critical | 9.8 | 2019-01-18 | Spring Batch versions 3.0.9, 4.0.1, 4.1.0, and older unsupported versions, were susceptible to XML External Entity Injection (XXE) when receiving XML data from… |
CVE-2020-5411 | High | 8.1 | 2020-06-11 | When configured to enable default typing, Jackson contained a deserialization vulnerability that could lead to arbitrary code execution. Jackson fixed this vul… |
CVE-2026-47881 | Medium | 5.9 | 2026-08-27 | Spring Batch's FlatFileItemReader supports files where a single logical record spans multiple physical lines — for example, a CSV field that contains embedded… |
CVE-2026-47878 | Medium | 5.6 | 2026-08-27 | DefaultExecutionContextSerializer, used by default in Spring Batch's JDBC job repository, passes Base64-decoded bytes directly to ObjectInputStream.readObject(… |
CVE-2026-47875 | Medium | 5.6 | 2026-08-27 | Applications that deserialize execution contexts with Jackson2ExecutionContextStringSerializer are vulnerable to a deserialization attack if they use an untrus… |