Spring by Pivotal Spring Framework vulnerabilities
6 published CVEs name Spring by Pivotal Spring Framework among the affected products; CISA lists 1 of them as exploited in the wild.
- Published CVEs
- 6
- Last 12 months
- 0
- Critical
- 3
- Known exploited
- 1
Critical 3High 2Medium 1Low 0Not scored 0
Known exploitedNewest addition to KEV first
- CVE-2018-1273
Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by…
Spring by Pivotal · Spring Framework
ExploitedCritical9.8
Newest CVEs
- CVE-2018-1274
Spring Data Commons, versions 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property path parser vulnerability caused by unlimited…
Spring by Pivotal · Spring Framework
High7.5 - CVE-2018-1275
Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow applications to expose STOMP over…
Spring by Pivotal · Spring Framework
Critical9.8 - CVE-2018-1273
Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by…
Spring by Pivotal · Spring Framework
ExploitedCritical9.8 - CVE-2018-1272
Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, provide client-side support for multipart…
Spring by Pivotal · Spring Framework
High7.5 - CVE-2018-1271
Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to configure Spring MVC to…
Spring by Pivotal · Spring Framework
Medium5.9 - CVE-2018-1270
Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over…
Spring by Pivotal · Spring Framework
Critical9.8