Vendor

    Spring By Pivotal

    7 known vulnerabilities in products by Spring By Pivotal, 1 of them actively exploited (CISA KEV).

    Key figures

    7

    Vulnerabilities

    1

    Actively exploited (KEV)

    1

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Spring By Pivotal
    CriticalCVE-2018-1273

    VMware Tanzu Spring Data Commons Property Binder Vulnerability

    In CISA KEVRansomwarealso in 5 other products

    		9.8
    CriticalCVE-2018-1270

    Spring Framework: Code Injection

    also in 28 other products

    		9.8
    CriticalCVE-2018-1275

    Spring Framework: Code Injection

    also in 19 other products

    		9.8
    MediumCVE-2018-1271

    Spring Framework: Path Traversal

    also in 28 other products

    		5.9
    HighCVE-2018-1272

    Spring Framework: Privilege Escalation

    also in 25 other products

    		7.5
    HighCVE-2018-1274

    Spring Framework: Denial of Service

    also in 3 other products

    		7.5
    HighCVE-2018-15801

    Authorization Bypass During JWT Issuer Validation with spring-security

    also in 1 other product

    		3.3

    Products

    Products by Spring By Pivotal
    Spring Framework61