vmware spring boot
productUScpe:2.3:a:vmware:spring_boot:*:*:*:*:*:*:*:*
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
by severity
5critical6high4medium0low
updated 2026-10-28
01
vulnerabilities (20)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2017-8046US | critical9.8 | Exploit |
| CVE-2022-27772US | high7.8 | Exploit |
| CVE-2026-40976US | —OT elevated | Exploit |
| CVE-2021-26987US | critical9.8 | — |
| CVE-2023-22602US | high7.5 | — |
| CVE-2023-34055US | medium6.5 | — |
| CVE-2018-1196US | medium5.9 | — |
| CVE-2023-20873US | critical9.8 | — |
| CVE-2023-20883US | high7.5 | — |
| CVE-2026-22733US | high8.1OT elevated | — |
| CVE-2026-22731US | high8.1OT elevated | — |
| CVE-2026-40975US | high7.5OT elevated | — |
| CVE-2026-40972US | — | — |
| CVE-2026-40974US | critical9.8 | — |
| CVE-2026-40971US | critical9.1 | — |
| CVE-2026-40970US | medium6.8 | — |
| CVE-2026-40973US | — | — |
| CVE-2026-40992US | — | — |
| CVE-2026-40977US | medium6.7 | — |
| CVE-2026-41001US | — | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-295Improper Certificate Validation4 CVEs
- CWE-377Insecure Temporary File3 CVEs
- CWE-288Authentication Bypass Using an Alternate Path or Channel2 CVEs
- CWE-400Uncontrolled Resource Consumption2 CVEs
- CWE-59Improper Link Resolution Before File Access ('Link Following')2 CVEs
- CWE-20Improper Input Validation1 CVEs
- CWE-208Observable Timing Discrepancy1 CVEs
- CWE-305Authentication Bypass by Primary Weakness1 CVEs
03
sources (1)
Which sources assert this record, and when.
- USNVD / CVE20 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan