Vendor/product archive

pivotal_software / spring_data_rest CVEs

Beta · best-effort

4 CVEs tagged to pivotal_software / spring_data_rest — 2 Critical, 2 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to pivotal_software vendor archive

CVE-2018-1259

Published May 11, 2018

Spring Data Commons, versions 1.13 prior to 1.13.12 and 2.0 prior to 2.0.7, used in combination with XMLBeam 1.4.14 or earlier versions, contains a property binder vulnerability c…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2018-1274

Published Apr 18, 2018

Spring Data Commons, versions 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property path parser vulnerability caused by unlimited resource allocation.…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2018-1273

Published Apr 11, 2018

Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of…

CVSS 9.8 · Critical

evidence mentions: 8
Buzz score: 60.0

KEV listed

Vendor/product tagsBeta · best-effort

CVE-2017-8046

Published Jan 4, 2018

Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions prior to 3.0.1 (Kay SR1) and Spring Boot versions prior to 1.5…

CVSS 9.8 · Critical

evidence mentions: 3
Buzz score: 20.4

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1