[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f_DYRyiNzw8p4lmh2t4Wt7mL2MRUiiB66hhGdmXVIVm8":3,"g5a-risk:CVE-2013-4152":289},{"success":4,"data":5,"meta":287},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":28,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":100,"references":101,"referencesCount":178,"weaknesses":179,"weaknessesCount":183,"isActivelyExploited":31,"cisaInfo":28,"otxData":28,"relatedBlogPosts":184,"seoMetadata":185,"configurations":210,"relatedVendorCves":278,"notableEvents":279},"CVE-2013-4152","What is CVE-2013-4152?","The Spring OXM wrapper in Spring Framework before 3.2.4 and 4.0.0.M1, when using the JAXB marshaller, does not disable entity resolution, which allows context-dependent attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via an XML external entity declaration in conjunction with an entity reference in a (1) DOMSource, (2) StAXSource, (3) SAXSource, or (4) StreamSource, aka an XML External Entity (XXE) issue.","The Spring OXM wrapper in Spring Framework before 3.2.4 and 4.0.0.M1, when using the JAXB marshaller, does not disable entity resolution, which allows contex...","2014-01-23T21:55:04.853","2026-06-16T23:56:42.9",6.8,"AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":32},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":24,"ExploitabilityScore":29,"ImpactScore":30,"ACInsufInfo":31,"ObtainAllPrivilege":31,"ObtainUserPrivilege":31,"ObtainOtherPrivilege":31,"UserInteractionRequired":31},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","MEDIUM","NONE","PARTIAL","",null,8.6,6.4,false,[],0.26467,[33,33,33,33,33,33,33],"Medium",[37,42,45,48,51,54,57,60,63,67,70,73,76,79,82,85,88,91,94,97],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"springsource","spring_framework","3.0.0","cpe:2.3:a:springsource:spring_framework:3.0.0:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":43,"criteria":44,"vulnerable":4},"3.0.0.m1","cpe:2.3:a:springsource:spring_framework:3.0.0.m1:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":46,"criteria":47,"vulnerable":4},"3.0.0.m2","cpe:2.3:a:springsource:spring_framework:3.0.0.m2:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":49,"criteria":50,"vulnerable":4},"3.0.1","cpe:2.3:a:springsource:spring_framework:3.0.1:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":52,"criteria":53,"vulnerable":4},"3.0.2","cpe:2.3:a:springsource:spring_framework:3.0.2:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":55,"criteria":56,"vulnerable":4},"3.0.3","cpe:2.3:a:springsource:spring_framework:3.0.3:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":58,"criteria":59,"vulnerable":4},"3.0.4","cpe:2.3:a:springsource:spring_framework:3.0.4:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":61,"criteria":62,"vulnerable":4},"3.0.5","cpe:2.3:a:springsource:spring_framework:3.0.5:*:*:*:*:*:*:*",{"vendor":64,"product":39,"version":65,"criteria":66,"vulnerable":4},"vmware","*","cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:*",{"vendor":64,"product":39,"version":68,"criteria":69,"vulnerable":4},"3.0.6","cpe:2.3:a:vmware:spring_framework:3.0.6:*:*:*:*:*:*:*",{"vendor":64,"product":39,"version":71,"criteria":72,"vulnerable":4},"3.0.7","cpe:2.3:a:vmware:spring_framework:3.0.7:*:*:*:*:*:*:*",{"vendor":64,"product":39,"version":74,"criteria":75,"vulnerable":4},"3.1.0","cpe:2.3:a:vmware:spring_framework:3.1.0:*:*:*:*:*:*:*",{"vendor":64,"product":39,"version":77,"criteria":78,"vulnerable":4},"3.1.1","cpe:2.3:a:vmware:spring_framework:3.1.1:*:*:*:*:*:*:*",{"vendor":64,"product":39,"version":80,"criteria":81,"vulnerable":4},"3.1.2","cpe:2.3:a:vmware:spring_framework:3.1.2:*:*:*:*:*:*:*",{"vendor":64,"product":39,"version":83,"criteria":84,"vulnerable":4},"3.1.3","cpe:2.3:a:vmware:spring_framework:3.1.3:*:*:*:*:*:*:*",{"vendor":64,"product":39,"version":86,"criteria":87,"vulnerable":4},"3.1.4","cpe:2.3:a:vmware:spring_framework:3.1.4:*:*:*:*:*:*:*",{"vendor":64,"product":39,"version":89,"criteria":90,"vulnerable":4},"3.2.0","cpe:2.3:a:vmware:spring_framework:3.2.0:*:*:*:*:*:*:*",{"vendor":64,"product":39,"version":92,"criteria":93,"vulnerable":4},"3.2.1","cpe:2.3:a:vmware:spring_framework:3.2.1:*:*:*:*:*:*:*",{"vendor":64,"product":39,"version":95,"criteria":96,"vulnerable":4},"3.2.2","cpe:2.3:a:vmware:spring_framework:3.2.2:*:*:*:*:*:*:*",{"vendor":64,"product":39,"version":98,"criteria":99,"vulnerable":4},"4.0.0","cpe:2.3:a:vmware:spring_framework:4.0.0:milestone1:*:*:*:*:*:*",20,[102,106,109,112,115,119,122,126,129,133,138,142,147,152,154,156,158,160,162,164,166,168,170,172,174,176],{"url":103,"source":104,"tags":105},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2014-0212.html","Red Hat",[],{"url":107,"source":104,"tags":108},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2014-0245.html",[],{"url":110,"source":104,"tags":111},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2014-0254.html",[],{"url":113,"source":104,"tags":114},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2014-0400.html",[],{"url":116,"source":117,"tags":118},"http:\u002F\u002Fseclists.org\u002Fbugtraq\u002F2013\u002FAug\u002F154","Seclists",[],{"url":120,"source":117,"tags":121},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2013\u002FNov\u002F14",[],{"url":123,"source":124,"tags":125},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F56247","Secunia",[],{"url":127,"source":124,"tags":128},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F57915",[],{"url":130,"source":131,"tags":132},"http:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2014\u002Fdsa-2842","Debian",[],{"url":134,"source":135,"tags":136},"http:\u002F\u002Fwww.gopivotal.com\u002Fsecurity\u002Fcve-2013-4152","Gopivotal",[137],"Vendor Advisory",{"url":139,"source":140,"tags":141},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F61951","Securityfocus",[],{"url":143,"source":144,"tags":145},"https:\u002F\u002Fgithub.com\u002Fspring-projects\u002Fspring-framework\u002Fpull\u002F317\u002Ffiles","GitHub",[146],"Patch",{"url":148,"source":149,"tags":150},"https:\u002F\u002Fjira.springsource.org\u002Fbrowse\u002FSPR-10806","Springsource",[151,146],"Exploit",{"url":103,"source":104,"tags":153},[],{"url":107,"source":104,"tags":155},[],{"url":110,"source":104,"tags":157},[],{"url":113,"source":104,"tags":159},[],{"url":116,"source":117,"tags":161},[],{"url":120,"source":117,"tags":163},[],{"url":123,"source":124,"tags":165},[],{"url":127,"source":124,"tags":167},[],{"url":130,"source":131,"tags":169},[],{"url":134,"source":135,"tags":171},[137],{"url":139,"source":140,"tags":173},[],{"url":143,"source":144,"tags":175},[146],{"url":148,"source":149,"tags":177},[151,146],26,[180],{"id":181,"name":181,"description":182},"Unknown","CWE-264",1,[],{"title":186,"metaDescription":187,"keywords":188,"canonicalUrl":189,"structuredData":190},"What is CVE-2013-4152? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2013-4152, a medium severity cyber security vulnerability from 2014. The Spring OXM wrapper in Spring Framework before 3.2.4 an...","CVE-2013-4152, CVE-2013-4152 vulnerability, CVE-2013-4152 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2014, CVSS score, exploit, patch, remediation, springsource security, vmware security, spring_framework vulnerability","\u002Fwhat-is\u002Fcve-2013-4152",{"@context":191,"@type":192,"headline":186,"description":187,"datePublished":10,"dateModified":11,"author":193,"publisher":197,"about":201,"mainEntityOfPage":205,"articleSection":208,"keywords":209},"https:\u002F\u002Fschema.org","TechArticle",{"@type":194,"name":195,"url":196},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":194,"name":195,"url":196,"logo":198},{"@type":199,"url":200},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":202,"name":6,"description":203,"additionalType":204},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":206,"@id":207},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2013-4152","Cybersecurity","CVE-2013-4152, CVE-2013-4152 vulnerability, CVE-2013-4152 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[211],{"Operator":28,"Negate":28,"Nodes":212},[213],{"Operator":214,"Negate":31,"CPEMatch":215},"OR",[216,218,221,224,227,230,233,236,239,241,243,245,247,249,251,253,256,258,260,262,264,266,268,270,272,274,276],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":217,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"62111DAE-3E05-4D95-8B34-E2EFB6142DCA",{"Vulnerable":4,"Criteria":219,"MatchCriteriaID":220,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:springsource:spring_framework:3.0.0:m1:*:*:*:*:*:*","13E1344C-CB41-48FC-BB98-7FEBEBF190E9",{"Vulnerable":4,"Criteria":222,"MatchCriteriaID":223,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:springsource:spring_framework:3.0.0:m2:*:*:*:*:*:*","AD66E687-C387-486D-AC34-279961311A8F",{"Vulnerable":4,"Criteria":225,"MatchCriteriaID":226,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:springsource:spring_framework:3.0.0:m3:*:*:*:*:*:*","49018DD7-9E85-4B4D-B054-CD17EFB13E87",{"Vulnerable":4,"Criteria":228,"MatchCriteriaID":229,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:springsource:spring_framework:3.0.0:m4:*:*:*:*:*:*","37FC3F37-A033-491B-96F0-8B38E2E43BFA",{"Vulnerable":4,"Criteria":231,"MatchCriteriaID":232,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:springsource:spring_framework:3.0.0:rc1:*:*:*:*:*:*","12021339-C885-4A9E-95C1-4695F3DC1F76",{"Vulnerable":4,"Criteria":234,"MatchCriteriaID":235,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:springsource:spring_framework:3.0.0:rc2:*:*:*:*:*:*","6FB321B9-4838-4AAC-B8AF-C92015C946A0",{"Vulnerable":4,"Criteria":237,"MatchCriteriaID":238,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:springsource:spring_framework:3.0.0:rc3:*:*:*:*:*:*","DC19AE9E-B46C-4872-B562-E97DC80543F7",{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":240,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"32F4893D-61E6-4E7F-A30A-3AB96264531B",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":242,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"B7F99079-D584-456B-A116-62D10FBF8233",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":244,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"9A9F796E-340B-4FF5-9322-94E57D7BCEE6",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":246,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"D8BA17FD-BC52-4D84-9753-5D41D3BC35B4",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":248,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"637484A7-AB05-4F64-9311-6741BDF2579F",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":250,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"FAE5CFA5-769F-49E9-A7A9-56C8CED8692E",{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":252,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"528C85CE-2CC6-4B09-8C25-44A2B1C2D8B2",{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":254,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":255},"EB86A413-9595-4BD1-A5FD-1A62B93EA1C9","3.2.3",{"Vulnerable":4,"Criteria":69,"MatchCriteriaID":257,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"B9D5172D-5E19-40C1-8C1B-CC22706E780D",{"Vulnerable":4,"Criteria":72,"MatchCriteriaID":259,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"46E410D2-DA53-4806-B296-451C3D9CDEEA",{"Vulnerable":4,"Criteria":75,"MatchCriteriaID":261,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"20D6E5AC-9898-416F-8268-3623E1706072",{"Vulnerable":4,"Criteria":78,"MatchCriteriaID":263,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"B61F3E25-A415-4A25-91D6-4FBA6F575AAB",{"Vulnerable":4,"Criteria":81,"MatchCriteriaID":265,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"8A2C4C81-2E79-411C-AEB8-A5E40FC28D31",{"Vulnerable":4,"Criteria":84,"MatchCriteriaID":267,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"010915FE-3BCE-4652-8D8B-47EE085F3BEE",{"Vulnerable":4,"Criteria":87,"MatchCriteriaID":269,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"D16C8EFA-F1E4-48C3-BC86-A132873426C4",{"Vulnerable":4,"Criteria":90,"MatchCriteriaID":271,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"47CED0ED-D67E-48AF-BB1A-EB1030897A8C",{"Vulnerable":4,"Criteria":93,"MatchCriteriaID":273,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"D2E2EA60-735E-431E-BEFE-DC5C1046E532",{"Vulnerable":4,"Criteria":96,"MatchCriteriaID":275,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"DFD1FA92-7BFC-4874-89FC-BE0F378F0DB3",{"Vulnerable":4,"Criteria":99,"MatchCriteriaID":277,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"FD20A2BE-2024-4DAA-825E-213ACB667DE9",[],[280],{"id":281,"eventType":282,"eventTime":283,"details":284,"label":285,"color":286},"d5143e6b-3644-4baf-aa90-52b5272e6fde","LOW_EPSS_DELTA","2026-04-01T14:23:26.290434+00:00","Daily EPSS score decreased by 0.167 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":288,"version":22},1793198616650,{"score":290,"band":35,"action":291,"scoredAt":292},47,"Plan remediation","2026-07-01T10:18:47.750855+00:00"]