Lucene search

CVE-2018-1270

🗓️ 06 Apr 2018 13:00:29Reported by [email protected]Type

Spring Framework allows remote code execution via STOMP over WebSocket endpoint

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 49
Tenable Nessus	Spring Framework 4.3.x < 4.3.16 / 5.0.x < 5.0.5 Remote Code Execution with spring-messaging (CVE-2018-1270)	2 Oct 201900:00	–	nessus
Tenable Nessus	Debian DLA-2635-1 : libspring-java security update	27 Apr 202100:00	–	nessus
Tenable Nessus	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.6)	24 Jan 202300:00	–	nessus
seebug.org	spring-messaging Remote Code Execution(CVE-2018-1270)	8 Apr 201800:00	–	seebug
CVE	CVE-2018-1270	6 Apr 201813:29	–	cve
CVE	CVE-2018-1275	11 Apr 201813:29	–	cve
Prion	Remote code execution	6 Apr 201813:29	–	prion
Prion	Remote code execution	11 Apr 201813:29	–	prion
Debian CVE	CVE-2018-1270	6 Apr 201813:29	–	debiancve
Debian CVE	CVE-2018-1275	11 Apr 201813:29	–	debiancve

Nvd

Node

vmware spring_frameworkRange<4.3.16

vmware spring_frameworkRange5.0.0–5.0.5

Node

oracle application_testing_suiteMatch12.5.0.3

oracle application_testing_suiteMatch13.1.0.1

oracle application_testing_suiteMatch13.2.0.1

oracle application_testing_suiteMatch13.3.0.1

oracle big_data_discoveryMatch1.6.0

oracle communications_converged_application_serverRange<7.0.0.1

oracle communications_diameter_signaling_routerRange<8.3

oracle communications_performance_intelligence_centerRange<10.2.1

oracle communications_services_gatekeeperRange<6.1.0.4.0

oracle enterprise_manager_ops_centerMatch12.2.2

oracle enterprise_manager_ops_centerMatch12.3.3

oracle goldengate_for_big_dataMatch12.2.0.1

oracle goldengate_for_big_dataMatch12.3.1.1

oracle goldengate_for_big_dataMatch12.3.2.1

oracle health_sciences_information_managerMatch3.0

oracle healthcare_master_person_indexMatch3.0

oracle healthcare_master_person_indexMatch4.0

oracle insurance_calculation_engineMatch10.1.1

oracle insurance_calculation_engineMatch10.2

oracle insurance_calculation_engineMatch10.2.1

oracle insurance_rules_paletteMatch10.0

oracle insurance_rules_paletteMatch10.1

oracle insurance_rules_paletteMatch10.2

oracle insurance_rules_paletteMatch11.0

oracle insurance_rules_paletteMatch11.1

oracle primavera_gatewayMatch15.2

oracle primavera_gatewayMatch16.2

oracle primavera_gatewayMatch17.12

oracle retail_back_officeMatch14.0

oracle retail_back_officeMatch14.1

oracle retail_central_officeMatch14.0

oracle retail_central_officeMatch14.1

oracle retail_customer_insightsMatch15.0

oracle retail_customer_insightsMatch16.0

oracle retail_integration_busMatch14.0.1

oracle retail_integration_busMatch14.0.2

oracle retail_integration_busMatch14.0.3

oracle retail_integration_busMatch14.0.4

oracle retail_integration_busMatch14.1.1

oracle retail_integration_busMatch14.1.2

oracle retail_integration_busMatch14.1.3

oracle retail_integration_busMatch15.0.0.1

oracle retail_integration_busMatch15.0.1

oracle retail_integration_busMatch15.0.2

oracle retail_integration_busMatch16.0

oracle retail_integration_busMatch16.0.1

oracle retail_integration_busMatch16.0.2

oracle retail_open_commerce_platformMatch5.3.0

oracle retail_open_commerce_platformMatch6.0.0

oracle retail_open_commerce_platformMatch6.0.1

oracle retail_order_brokerMatch5.1

oracle retail_order_brokerMatch5.2

oracle retail_order_brokerMatch15.0

oracle retail_order_brokerMatch16.0

oracle retail_point-of-saleMatch14.0

oracle retail_point-of-saleMatch14.1

oracle retail_predictive_application_serverMatch14.0

oracle retail_predictive_application_serverMatch14.1

oracle retail_predictive_application_serverMatch15.0

oracle retail_predictive_application_serverMatch16.0

oracle retail_returns_managementMatch14.0

oracle retail_returns_managementMatch14.1

oracle retail_xstore_point_of_serviceMatch7.1

oracle service_architecture_leveraging_tuxedoMatch12.1.3.0.0

oracle service_architecture_leveraging_tuxedoMatch12.2.2.0.0

oracle tape_library_acslsMatch8.4

Node

redhat fuseMatch1.0.0

Node

debian debian_linuxMatch9.0

Source	Link
securityfocus	www.securityfocus.com/bid/103696
lists	www.lists.apache.org/thread.html/6d3d34adcf3dfc48e36342aa1f18ce3c20bb8e4c458a97508d5bfed1%40%3Cissues.activemq.apache.org%3E
lists	www.lists.apache.org/thread.html/ab825fcade0b49becfa30235b3d54f4a51bb74ea96b6c9adb5d1378c%40%3Cissues.activemq.apache.org%3E
lists	www.lists.debian.org/debian-lts-announce/2021/04/msg00022.html
lists	www.lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E
pivotal	www.pivotal.io/security/cve-2018-1270
oracle	www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
exploit-db	www.exploit-db.com/exploits/44796/
oracle	www.oracle.com/security-alerts/cpujul2020.html
oracle	www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

06 Apr 2018 13:29Current

9.6High risk

Vulners AI Score9.6

CVSS27.5

CVSS39.8

EPSS0.89812