CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1079 matches found

CVE•added 2026/08/27 5:57 p.m.•30 views

CVE-2026-59298

Spring Cloud Function is affected by improper filtering of HTTP headers , allowing potential header manipulation. The vulnerability spans multiple release lines: 5.0.0–5.0.3 , 4.3.0–4.3.4 , 4.2.0–4.2.7 , and 3.2.16 and earlier . The CVSS 3.1 score is 3.1 (LOW) , reflecting a network-based attack ...

3.5CVSS5.8AI score0.00225EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2026/08/27 5:57 p.m.•38 views

CVE-2026-59298 Potential for improper filtering of HTTP headers in Spring Cloud Function

Potential for improper filtering of HTTP headers in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier...

3.1CVSS0.00225EPSS

SaveExploits0References1

Vulnrichment•added 2026/08/27 5:57 p.m.•14 views

CVE-2026-59298 Potential for improper filtering of HTTP headers in Spring Cloud Function

3.1CVSS5.8AI score0.00225EPSS

SaveExploits0References1

EUVD•added 2026/08/27 5:57 p.m.•17 views

EUVD-2026-67184

3.1CVSS5.8AI score0.00225EPSS

SaveExploits0References1

OSV•added 2026/08/27 5:57 p.m.•7 views

CVE-2026-59298 Potential for improper filtering of HTTP headers in Spring Cloud Function

3.1CVSS5.9AI score

SaveExploits0References3

Mend•added 2026/08/27 5:57 p.m.•1 views

CVE-2026-59298

3.5CVSS5.8AI score0.00225EPSS

SaveExploits0References3

Vulnrichment•added 2026/08/27 5:57 p.m.•19 views

CVE-2026-59297 Spring Cloud Function can incorrectly determine if URI is secure

Implementation of isSecure call of ServerlessHttpServletRequest does not verify the actual scheme. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7...

3.1CVSS5.8AI score0.00134EPSS

SaveExploits0References1

CVE•added 2026/08/27 5:57 p.m.•33 views

CVE-2026-59297

Spring Cloud Function versions 4.2.0–4.2.7 , 4.3.0–4.3.4 , and 5.0.0–5.0.3 are affected by a vulnerability in the ServerlessHttpServletRequest class, where the isSecure() method does not verify the actual URI scheme. This can cause the application to incorrectly determine whether a request is sec...

3.5CVSS5.8AI score0.00134EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2026/08/27 5:57 p.m.•44 views

CVE-2026-59297 Spring Cloud Function can incorrectly determine if URI is secure

3.1CVSS0.00134EPSS

SaveExploits0References1

EUVD•added 2026/08/27 5:57 p.m.•14 views

EUVD-2026-67183

3.1CVSS5.8AI score0.00134EPSS

SaveExploits0References1

OSV•added 2026/08/27 5:57 p.m.•8 views

CVE-2026-59297 Spring Cloud Function can incorrectly determine if URI is secure

3.1CVSS5.4AI score

SaveExploits0References3

Mend•added 2026/08/27 5:57 p.m.•2 views

CVE-2026-59297

3.5CVSS5.8AI score0.00134EPSS

SaveExploits0References3

Cvelist•added 2026/08/27 5:57 p.m.•50 views

CVE-2026-59291 Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function

Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7...

2CVSS0.00245EPSS

SaveExploits0References1

EUVD•added 2026/08/27 5:57 p.m.•19 views

EUVD-2026-67179

Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7...

2CVSS6AI score0.00245EPSS

SaveExploits0References1

OSV•added 2026/08/27 5:57 p.m.•8 views

CVE-2026-59291 Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function

Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7...

2CVSS5.9AI score

SaveExploits0References3

CVE•added 2026/08/27 5:57 p.m.•86 views

CVE-2026-59291

Spring Cloud Function versions 5.0.0–5.0.3, 4.3.0–4.3.4, and 4.2.0–4.2.7 are vulnerable to arbitrary file read and SSRF via the function that processes input data. An attacker can access arbitrary files or make unauthorized network requests by supplying crafted input that is improperly handled. T...

5.5CVSS6AI score0.00245EPSS

SaveExploits0References1Affected Software1

Mend•added 2026/08/27 5:57 p.m.•1 views

CVE-2026-59291

Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7...

5.5CVSS0.00245EPSS

SaveExploits0References3

Vulnrichment•added 2026/08/27 5:57 p.m.•15 views

CVE-2026-59284 Spring Cloud Commons no allow list for writable env actuator endpoint

There is no allow list for property keys when Spring Cloud Commons writable /actuator/env is enabled. Spring Cloud Commons 5.0.0 - 5.0.2 Spring Cloud Commons 4.3.0 - 4.3.3 Spring Cloud Commons 4.0.0 - 4.2.6 Spring Cloud Commons 3.1.10 and earlier...

7.6CVSS5.8AI score0.00427EPSS

SaveExploits0References1

Cvelist•added 2026/08/27 5:57 p.m.•70 views

CVE-2026-59284 Spring Cloud Commons no allow list for writable env actuator endpoint

7.6CVSS0.00427EPSS

SaveExploits0References1

EUVD•added 2026/08/27 5:57 p.m.•16 views

EUVD-2026-67173

7.6CVSS5.8AI score0.00427EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by