Spring by Pivotal Known Exploited Vulnerabilities

Evidence-backed KEV intelligence for Spring by Pivotal products — CISA KEV status, confidence, sensor telemetry, and virtual-patch availability.

Total KEVs

1

In CISA KEV

1

Beyond CISA KEV

0

Sensor Observed

0

Virtual Patch Available

0

Spring by Pivotal KEVs Added by Year

Loading...

1 Spring by Pivotal KEV added all time (primary attestation date).

Attested CVEs

CVE Confidence CISA KEV Added
CVE-2018-1273

Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability...

Confirmed In CISA 25 Mar 2022

Common Vulnerability Classes (CWE)

  • CWE-94 — Improper Control of Generation of Code ('Code Injection') 1

Browse all known exploited vulnerabilities · What is a known exploited vulnerability? · Methodology