Springblade vulnerabilities

2 known vulnerabilities in Springblade from Bladex. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.9 Critical severity

  Springblade: Improper Access Control

  CVE-2025-70982Jan 26, 2026Bladex

  Incorrect access control in the importUser function of SpringBlade v4.5.0 allows attackers with low-level privileges to arbitrarily import sensitive user data.

• 9.8 Critical severity

  Springblade: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-40787Aug 29, 2023BladexEPSS 18.2%

  In SpringBlade V3.6.0 when executing SQL query, the parameters submitted by the user are not wrapped in quotation marks, which leads to SQL injection.