CVE-2018-1272

🗓️ 06 Apr 2018 13:29:00Reported by ubuntu.comType

ubuntucve🔗 ubuntu.com👁 56 Views

Spring Framework allows multipart request attack. Risk of privilege escalation

Reporter	Title	Published	Views	Family All 119
IBM Security Bulletins	Security Bulletin: IBM Cognos Controller has addressed multiple vulnerabilities	2 Dec 202219:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Guardium Data Encryption (GDE)	12 Jan 202114:42	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found on thirdparty libraries used by IBM® MobileFirst Platform	26 Jan 202317:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Directory Integrator is affected by multiple security vulnerabilities	22 Jun 202316:30	–	ibm
IBM Security Bulletins	Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in Spring	23 Oct 202615:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities identified in IBM StoredIQ	20 Feb 202012:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to multiple security vulnerabilities	18 Feb 201914:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities fixed in 9.7.2.7	24 Oct 202411:46	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Spring Web affect watsonx.data	10 Feb 202510:24	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Pivota Spring Framework, VMware Tanzu Spring Framework, VMware Spring Framework might affect IBM Storage Defender Copy Data Management.	16 May 202519:21	–	ibm

Source	Link
pivotal	www.pivotal.io/security/cve-2018-1272
cve	www.cve.org/CVERecord

25 Aug 2025 22:46Current

7High risk

Vulners AI Score7

CVSS 26

CVSS 3.17.5

EPSS0.03065

spring framework multipart requests privilege escalation cve-2018-1272 bug 895114 server application