EUVD-2018-0477

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Issue in Pivotal Spring Framework prior to specific versions allows directory traversal attacks.

Reporter	Title	Published	Views	Family All 47
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by a Using Components with Known Vulnerabilities vulnerability	28 Sep 201804:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Controller has addressed multiple vulnerabilities	2 Dec 202219:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Guardium Data Encryption (GDE)	12 Jan 202114:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium Big Data Intelligence (SonarG) is vulnerable to using Components with Known Vulnerabilities	16 Jun 201822:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Directory Integrator is affected by multiple security vulnerabilities	22 Jun 202316:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling B2B Integrator vulnerable to multiple vulnerabilities due to Spring Framework	13 May 202214:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains vulnerable components and libraries. (CVE-2016-5007, CVE-2016-9878)	16 Jun 201822:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to multiple security vulnerabilities	18 Feb 201914:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities fixed in 9.7.2.7	24 Oct 202411:46	–	ibm
Atlassian	Insecure version of Spring Web MVC used in Confluence Analytics	19 Feb 202022:31	–	atlassian

[
  {
    "enisaIdVendor": [
      {
        "id": "165a4f30-c512-30e5-bd74-b00a905149e3",
        "vendor": {
          "name": "n/a"
        }
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2016-9878
github	www.github.com/spring-projects/spring-framework/issues/19513
github	www.github.com/spring-projects/spring-framework/commit/43bf008fbcd0d7945e2fcd5e30039bc4d74c7a98
github	www.github.com/spring-projects/spring-framework/commit/a7dc48534ea501525f11369d369178a60c2f47d0
github	www.github.com/spring-projects/spring-framework/commit/e2d6e709c3c65a4951eb096843ee75d5200cfcad
access	www.access.redhat.com/errata/RHSA-2017:3115
github	www.github.com/advisories/GHSA-2m8h-fgr8-2q9w
github	www.github.com/spring-projects/spring-framework
lists	www.lists.debian.org/debian-lts-announce/2019/07/msg00012.html
pivotal	www.pivotal.io/security/cve-2016-9878

07 Oct 2025 00:30Current

7.6High risk

Vulners AI Score7.6

CVSS 37.5

CVSS 25

EPSS0.04927