Login Request a demo
SD
Product
Spring Data Rest
by Pivotal Software · last CVE May 11, 2018
On CISA KEVExploited in the wildRansomware-linked
4
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 2High 2Medium 0Low 0
Severity
All severities4Critical2High2Medium0Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Spring Data Rest to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-1259
7.5
5%
May 11
Spring Data Commons, versions 1.13 prior to 1.13.12 and 2.0 prior to 2.0.7, used in combination with XMLBeam 1.4.14 or earlier versions, contains a property binder vulnerability…
Affected: 3.0 through 3.0.6
CVE-2018-1274
7.5
2%
Apr 18
Spring Data Commons, versions 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property path parser vulnerability caused by unlimited resource allocation
Affected: 3.0 through 3.0.5
Showing 2