Vulnerabilities > Oracle > Financial Services Regulatory Reporting With Agilereporter > Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2020-01-17	CVE-2020-5397	Cross-Site Request Forgery (CSRF) vulnerability in multiple products Spring Framework, versions 5.2.x prior to 5.2.3 are vulnerable to CSRF attacks through CORS preflight requests that target Spring MVC (spring-webmvc module) or Spring WebFlux (spring-webflux module) endpoints. network low complexity vmware oracle CWE-352	5.3

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.