Login Request a demo
ST
Product
Spring Tools
by Broadcom · last CVE Jul 30, 2026
6
CVEs
0
On KEV
8.3
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 3Medium 2Low 1
Severity
All severities6Critical0High3Medium2Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Spring Tools to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-47882
8.3
0%
Jul 30
Spring Boot DevTools remote secret generated with a non-cryptographic PRNG
Affected: before 5.3.0
CVE-2026-47873
8.0
0%
Jul 30
Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfaces
Affected: before 5.3.0
CVE-2026-47858
8.0
0%
Jul 30
live information startup mode is vulnerable for remote code execution
Affected: before 2.3.0; before 2.3.0; before 2.3.0; before 5.3.0
CVE-2026-59328
5.4
0%
Jul 30
Cross-Site Scripting in Eclipse Spring Boot Starter Wizard Dependency Tooltips
Affected: before 5.3.0
CVE-2026-59327
4.4
0%
Jul 30
Cleartext Storage of Spring Boot DevTools Remote Secret in Eclipse Launch Configurations
Affected: before 5.3.0
CVE-2026-59326
3.3
0%
Jul 30
HTTP Proxy Credentials Logged in Plaintext by the Spring Boot Language Server
Affected: before 2.3.0; before 2.3.0; before 2.3.0; before 5.3.0
Showing 6