Vmware Spring Boot vulnerabilities

• spring boot, vmware spring boot +1 more Predictable Temp Directory in Artemis Auto-configuration CVE-2026-41001 Fix available 5.3 MediumJune 11, 2026
• spring boot, vmware spring boot +1 more Mail Auto-Configuration Does Not Enable SSL Hostname Verification CVE-2026-40992 Fix available 5.0 MediumJune 11, 2026
• spring boot, vmware spring boot +1 more Spring Boot's PID file write follows symlinks at predictable default path CVE-2026-40977 Fix available 4.7 MediumApril 27, 2026
• spring boot, vmware spring boot, red hat amq broker 7 +14 more +16 more Spring Boot's default security filter chain has no authorization rule with Actuator but without Health CVE-2026-40976 Fix available 9.1 CriticalApril 27, 2026
• spring boot, vmware spring boot, red hat hawtio hawtio 4.4.0 +14 more +16 more Spring Boot's random value property source uses a weak PRNG unsuitable for secrets CVE-2026-40975 Fix available 4.8 MediumApril 27, 2026
• spring boot, vmware spring boot +1 more Spring Boot's Cassandra SSL auto-configuration disables TLS hostname verification CVE-2026-40974 Fix available 5.0 MediumApril 27, 2026
• spring boot, vmware spring boot +1 more Spring Boot accepts predictable temp directory without ownership verification CVE-2026-40973 Fix available 7.0 HighApril 27, 2026
• spring boot, vmware spring boot +1 more Spring Boot DevTools remote secret comparison is vulnerable to timing attacks CVE-2026-40972 Fix available 7.5 HighApril 27, 2026
• spring boot, vmware spring boot +1 more Spring Boot's RabbitMQ auto-configuration doesn't perform hostname verification when connecting to the RabbitMQ broker CVE-2026-40971 Fix available 5.0 MediumApril 27, 2026
• spring boot, vmware spring boot +1 more Spring Boot's Elasticsearch auto-configuration doesn't perform hostname verification when connecting to the Elasticsearch server. CVE-2026-40970 Fix available 5.0 MediumApril 27, 2026
• spring security, vmware spring boot +1 more Authentication Bypass under Actuator CloudFoundry endpoints CVE-2026-22733 Fix available 8.2 HighMarch 19, 2026
• spring boot, vmware spring boot +1 more Authentication Bypass under Actuator Health groups paths CVE-2026-22731 Fix available 8.2 HighMarch 19, 2026
• spring boot, vmware spring boot +1 more Spring Boot server Web Observations DoS Vulnerability CVE-2023-34055 Fix available 5.3 MediumNovember 28, 2023
• spring boot, vmware spring boot +1 more Spring Boot Welcome Page Denial of Service CVE-2023-20883 Fix available 7.5 HighMay 26, 2023
• spring boot, vmware spring boot +1 more Spring Boot Security Bypass with Wildcard Pattern Matching on Cloud Foundry CVE-2023-20873 Fix available 9.8 CriticalApril 20, 2023
• apache shiro, vmware spring boot +1 more Apache Shiro before 1.11.0, when used with Spring Boot 2.6+, may allow authentication bypass through a specially crafted HTTP request CVE-2023-22602 Fix available 7.5 HighJanuary 14, 2023
• vmware bosh editor, cloudfoundry manifest yml support, concourse ci pipeline editor +2 more +4 more Spring Tools 4 for Eclipse version 4.16.0 and below as well as VSCode extensions such as Spring... CVE-2022-31691 Public exploit 9.8 CriticalNovember 4, 2022
• vmware spring boot Temporary Directory Hijacking to Local Privilege Escalation Vulnerability in org.springframework.boot:spring-boot CVE-2022-27772 Public exploitFix available 7.8 HighMarch 30, 2022
• netapp element plug-in for vcenter server, management services for element software and netapp hci, solidfire \& hci management node +1 more +3 more Element Plug-in for vCenter Server incorporates SpringBoot Framework. SpringBoot Framework... CVE-2021-26987 9.8 CriticalMarch 15, 2021
• dell emc spring boot, spring boot +1 more Moderate severity vulnerability that affects org.springframework.boot:spring-boot CVE-2018-1196 Fix available 5.9 MediumMarch 19, 2018
• pivotal software spring data rest, vmware spring boot, pivotal spring data rest and spring boot +2 more Remote code execution in PATCH requests in Spring Data REST CVE-2017-8046 Public exploitFix available EPSS 74.5% 9.8 CriticalJanuary 4, 2018