Login Request a demo
ST
Product
Spring Tools for Eclipse
by Spring · last CVE Jul 30, 2026
6
CVEs
0
On KEV
8.3
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 3Medium 2Low 1
Severity
All severities6Critical0High3Medium2Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Spring Tools for Eclipse to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-47882
8.3
0%
Jul 30
Spring Boot DevTools remote secret generated with a non-cryptographic PRNG
Affected: through 5.2.0
CVE-2026-47873
8.0
0%
Jul 30
Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfaces
Affected: through 5.2.0
CVE-2026-47858
8.0
0%
Jul 30
live information startup mode is vulnerable for remote code execution
Affected: through 5.2.0
CVE-2026-59328
5.4
0%
Jul 30
Cross-Site Scripting in Eclipse Spring Boot Starter Wizard Dependency Tooltips
Affected: through 5.2.0
CVE-2026-59327
4.4
0%
Jul 30
Cleartext Storage of Spring Boot DevTools Remote Secret in Eclipse Launch Configurations
Affected: through 5.2.0
CVE-2026-59326
3.3
0%
Jul 30
HTTP Proxy Credentials Logged in Plaintext by the Spring Boot Language Server
Affected: through 5.2.0
Showing 6