Spring Spring Tools for Eclipse vulnerabilities
6 published CVEs name Spring Spring Tools for Eclipse among the affected products.
- 6Published CVEs6 of them scored
- 6Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-59326
HTTP Proxy Credentials Logged in Plaintext by the Spring Boot Language Server
Spring · Spring Tools for Eclipse
Low3.3 - CVE-2026-59328
Cross-Site Scripting in Eclipse Spring Boot Starter Wizard Dependency Tooltips
Spring · Spring Tools for Eclipse
Medium4.2 - CVE-2026-59327
Cleartext Storage of Spring Boot DevTools Remote Secret in Eclipse Launch Configurations
Spring · Spring Tools for Eclipse
Medium4.4 - CVE-2026-47882
Spring Boot DevTools remote secret generated with a non-cryptographic PRNG
Spring · Spring Tools for Eclipse
High8.3 - CVE-2026-47873
Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfaces
Spring · Spring Tools for Eclipse
High8.0 - CVE-2026-47858
live information startup mode is vulnerable for remote code execution
Spring · Spring Tools for Eclipse
High8.0