EUVD-2018-0493

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Spring Framework allows client-side multipart requests, leading to possible privilege escalation attacks.

Reporter	Title	Published	Views	Family All 119
IBM Security Bulletins	Security Bulletin: IBM Cognos Controller has addressed multiple vulnerabilities	2 Dec 202219:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Guardium Data Encryption (GDE)	12 Jan 202114:42	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found on thirdparty libraries used by IBM® MobileFirst Platform	26 Jan 202317:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Directory Integrator is affected by multiple security vulnerabilities	22 Jun 202316:30	–	ibm
IBM Security Bulletins	Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in Spring	23 Oct 202615:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities identified in IBM StoredIQ	20 Feb 202012:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to multiple security vulnerabilities	18 Feb 201914:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities fixed in 9.7.2.7	24 Oct 202411:46	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Spring Web affect watsonx.data	10 Feb 202510:24	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Pivota Spring Framework, VMware Tanzu Spring Framework, VMware Spring Framework might affect IBM Storage Defender Copy Data Management.	16 May 202519:21	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "29b27bab-71c5-3c02-a225-dd2d856de1f9",
        "vendor": {
          "name": "Spring by Pivotal"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "59029636-c07f-3f4b-999c-4f30a3665e12",
        "product": {
          "name": "Spring Framework"
        },
        "product_version": "Versions prior to 5.0.5 and 4.3.15"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-1272
github	www.github.com/spring-projects/spring-framework/commit/ab2410c754b67902f002bfcc0c3895bd7772d39
github	www.github.com/spring-projects/spring-framework/commit/e02ff3a0da50744b0980d5d665fd242eedea767
access	www.access.redhat.com/errata/RHSA-2018:1320
access	www.access.redhat.com/errata/RHSA-2018:2669
github	www.github.com/advisories/GHSA-4487-x383-qpph
pivotal	www.pivotal.io/security/cve-2018-1272
oracle	www.oracle.com/security-alerts/cpujul2020.html
oracle	www.oracle.com/security-alerts/cpuoct2021.html
oracle	www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html

07 Oct 2025 00:30Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.5

CVSS 26

EPSS0.03065