CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-1273

Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user (or attacker) can supply specially crafted request parameters against Spring Data REST backed HTTP resources or using Spring Data's projection-based request payload binding hat can lead to a remote code execution attack.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.942

EPSS Ranking 99.9%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

Proposed Action

Spring Data Commons contains a property binder vulnerability which can allow an attacker to perform remote code execution.

Ransomware Campaign

Known

References

Products affected by CVE-2018-1273

Apache » Ignite » Version: 1.0.0

cpe:2.3:a:apache:ignite:1.0.0
Apache » Ignite » Version: 1.0.1

cpe:2.3:a:apache:ignite:1.0.1
Apache » Ignite » Version: 1.0.2

cpe:2.3:a:apache:ignite:1.0.2
Apache » Ignite » Version: 1.1.0

cpe:2.3:a:apache:ignite:1.1.0
Apache » Ignite » Version: 1.1.3

cpe:2.3:a:apache:ignite:1.1.3
Apache » Ignite » Version: 1.1.4

cpe:2.3:a:apache:ignite:1.1.4
Apache » Ignite » Version: 1.2.0

cpe:2.3:a:apache:ignite:1.2.0
Apache » Ignite » Version: 1.3.0

cpe:2.3:a:apache:ignite:1.3.0
Apache » Ignite » Version: 1.3.1

cpe:2.3:a:apache:ignite:1.3.1
Apache » Ignite » Version: 1.3.2

cpe:2.3:a:apache:ignite:1.3.2
Apache » Ignite » Version: 1.3.3

cpe:2.3:a:apache:ignite:1.3.3
Apache » Ignite » Version: 1.4.0

cpe:2.3:a:apache:ignite:1.4.0
Apache » Ignite » Version: 1.4.1

cpe:2.3:a:apache:ignite:1.4.1
Apache » Ignite » Version: 1.5.0

cpe:2.3:a:apache:ignite:1.5.0
Apache » Ignite » Version: 1.6.0

cpe:2.3:a:apache:ignite:1.6.0
Apache » Ignite » Version: 1.6.4

cpe:2.3:a:apache:ignite:1.6.4
Apache » Ignite » Version: 1.7.0

cpe:2.3:a:apache:ignite:1.7.0
Apache » Ignite » Version: 1.7.10

cpe:2.3:a:apache:ignite:1.7.10
Apache » Ignite » Version: 1.8.0

cpe:2.3:a:apache:ignite:1.8.0
Apache » Ignite » Version: 1.9.0

cpe:2.3:a:apache:ignite:1.9.0
Apache » Ignite » Version: 2.0.0

cpe:2.3:a:apache:ignite:2.0.0
Apache » Ignite » Version: 2.1.0

cpe:2.3:a:apache:ignite:2.1.0
Apache » Ignite » Version: 2.1.1

cpe:2.3:a:apache:ignite:2.1.1
Apache » Ignite » Version: 2.2.0

cpe:2.3:a:apache:ignite:2.2.0
Apache » Ignite » Version: 2.3.0

cpe:2.3:a:apache:ignite:2.3.0
Apache » Ignite » Version: 2.4.0

cpe:2.3:a:apache:ignite:2.4.0
Apache » Ignite » Version: 2.5.0

cpe:2.3:a:apache:ignite:2.5.0
Oracle » Financial Services Crime And Compliance Management Studio » Version: 8.0.8.2.0

cpe:2.3:a:oracle:financial_services_crime_and_compliance_management_studio:8.0.8.2.0
Oracle » Financial Services Crime And Compliance Management Studio » Version: 8.0.8.3.0

cpe:2.3:a:oracle:financial_services_crime_and_compliance_management_studio:8.0.8.3.0
Pivotal Software » Spring Data Commons » Version: 1.0.0

cpe:2.3:a:pivotal_software:spring_data_commons:1.0.0
Pivotal Software » Spring Data Commons » Version: 1.1.0

cpe:2.3:a:pivotal_software:spring_data_commons:1.1.0
Pivotal Software » Spring Data Commons » Version: 1.10.0

cpe:2.3:a:pivotal_software:spring_data_commons:1.10.0
Pivotal Software » Spring Data Commons » Version: 1.10.1

cpe:2.3:a:pivotal_software:spring_data_commons:1.10.1
Pivotal Software » Spring Data Commons » Version: 1.10.2

cpe:2.3:a:pivotal_software:spring_data_commons:1.10.2
Pivotal Software » Spring Data Commons » Version: 1.11.0

cpe:2.3:a:pivotal_software:spring_data_commons:1.11.0
Pivotal Software » Spring Data Commons » Version: 1.11.1

cpe:2.3:a:pivotal_software:spring_data_commons:1.11.1
Pivotal Software » Spring Data Commons » Version: 1.11.2

cpe:2.3:a:pivotal_software:spring_data_commons:1.11.2
Pivotal Software » Spring Data Commons » Version: 1.11.4

cpe:2.3:a:pivotal_software:spring_data_commons:1.11.4
Pivotal Software » Spring Data Commons » Version: 1.11.5

cpe:2.3:a:pivotal_software:spring_data_commons:1.11.5
Pivotal Software » Spring Data Commons » Version: 1.11.6

cpe:2.3:a:pivotal_software:spring_data_commons:1.11.6
Pivotal Software » Spring Data Commons » Version: 1.12.0

cpe:2.3:a:pivotal_software:spring_data_commons:1.12.0
Pivotal Software » Spring Data Commons » Version: 1.12.1

cpe:2.3:a:pivotal_software:spring_data_commons:1.12.1
Pivotal Software » Spring Data Commons » Version: 1.12.10

cpe:2.3:a:pivotal_software:spring_data_commons:1.12.10
Pivotal Software » Spring Data Commons » Version: 1.12.2

cpe:2.3:a:pivotal_software:spring_data_commons:1.12.2
Pivotal Software » Spring Data Commons » Version: 1.12.3

cpe:2.3:a:pivotal_software:spring_data_commons:1.12.3
Pivotal Software » Spring Data Commons » Version: 1.12.4

cpe:2.3:a:pivotal_software:spring_data_commons:1.12.4
Pivotal Software » Spring Data Commons » Version: 1.12.5

cpe:2.3:a:pivotal_software:spring_data_commons:1.12.5
Pivotal Software » Spring Data Commons » Version: 1.12.6

cpe:2.3:a:pivotal_software:spring_data_commons:1.12.6
Pivotal Software » Spring Data Commons » Version: 1.12.7

cpe:2.3:a:pivotal_software:spring_data_commons:1.12.7
Pivotal Software » Spring Data Commons » Version: 1.12.8

cpe:2.3:a:pivotal_software:spring_data_commons:1.12.8
Pivotal Software » Spring Data Commons » Version: 1.12.9

cpe:2.3:a:pivotal_software:spring_data_commons:1.12.9
Pivotal Software » Spring Data Commons » Version: 1.13.0

cpe:2.3:a:pivotal_software:spring_data_commons:1.13.0
Pivotal Software » Spring Data Commons » Version: 1.13.1

cpe:2.3:a:pivotal_software:spring_data_commons:1.13.1
Pivotal Software » Spring Data Commons » Version: 1.13.10

cpe:2.3:a:pivotal_software:spring_data_commons:1.13.10
Pivotal Software » Spring Data Commons » Version: 1.13.2

cpe:2.3:a:pivotal_software:spring_data_commons:1.13.2
Pivotal Software » Spring Data Commons » Version: 1.13.3

cpe:2.3:a:pivotal_software:spring_data_commons:1.13.3
Pivotal Software » Spring Data Commons » Version: 1.13.4

cpe:2.3:a:pivotal_software:spring_data_commons:1.13.4
Pivotal Software » Spring Data Commons » Version: 1.13.5

cpe:2.3:a:pivotal_software:spring_data_commons:1.13.5
Pivotal Software » Spring Data Commons » Version: 1.13.6

cpe:2.3:a:pivotal_software:spring_data_commons:1.13.6
Pivotal Software » Spring Data Commons » Version: 1.13.7

cpe:2.3:a:pivotal_software:spring_data_commons:1.13.7
Pivotal Software » Spring Data Commons » Version: 1.13.8

cpe:2.3:a:pivotal_software:spring_data_commons:1.13.8
Pivotal Software » Spring Data Commons » Version: 1.13.9

cpe:2.3:a:pivotal_software:spring_data_commons:1.13.9
Pivotal Software » Spring Data Commons » Version: 1.2.0

cpe:2.3:a:pivotal_software:spring_data_commons:1.2.0
Pivotal Software » Spring Data Commons » Version: 1.2.1

cpe:2.3:a:pivotal_software:spring_data_commons:1.2.1
Pivotal Software » Spring Data Commons » Version: 1.3.0

cpe:2.3:a:pivotal_software:spring_data_commons:1.3.0
Pivotal Software » Spring Data Commons » Version: 1.3.1

cpe:2.3:a:pivotal_software:spring_data_commons:1.3.1
Pivotal Software » Spring Data Commons » Version: 1.3.2

cpe:2.3:a:pivotal_software:spring_data_commons:1.3.2
Pivotal Software » Spring Data Commons » Version: 1.4.0

cpe:2.3:a:pivotal_software:spring_data_commons:1.4.0
Pivotal Software » Spring Data Commons » Version: 1.4.1

cpe:2.3:a:pivotal_software:spring_data_commons:1.4.1
Pivotal Software » Spring Data Commons » Version: 1.5.0

cpe:2.3:a:pivotal_software:spring_data_commons:1.5.0
Pivotal Software » Spring Data Commons » Version: 1.5.1

cpe:2.3:a:pivotal_software:spring_data_commons:1.5.1
Pivotal Software » Spring Data Commons » Version: 1.5.2

cpe:2.3:a:pivotal_software:spring_data_commons:1.5.2
Pivotal Software » Spring Data Commons » Version: 1.5.3

cpe:2.3:a:pivotal_software:spring_data_commons:1.5.3
Pivotal Software » Spring Data Commons » Version: 1.6.0

cpe:2.3:a:pivotal_software:spring_data_commons:1.6.0
Pivotal Software » Spring Data Commons » Version: 1.6.1

cpe:2.3:a:pivotal_software:spring_data_commons:1.6.1
Pivotal Software » Spring Data Commons » Version: 1.6.2

cpe:2.3:a:pivotal_software:spring_data_commons:1.6.2
Pivotal Software » Spring Data Commons » Version: 1.6.3

cpe:2.3:a:pivotal_software:spring_data_commons:1.6.3
Pivotal Software » Spring Data Commons » Version: 1.6.4

cpe:2.3:a:pivotal_software:spring_data_commons:1.6.4
Pivotal Software » Spring Data Commons » Version: 1.6.5

cpe:2.3:a:pivotal_software:spring_data_commons:1.6.5
Pivotal Software » Spring Data Commons » Version: 1.7.0

cpe:2.3:a:pivotal_software:spring_data_commons:1.7.0
Pivotal Software » Spring Data Commons » Version: 1.7.1

cpe:2.3:a:pivotal_software:spring_data_commons:1.7.1
Pivotal Software » Spring Data Commons » Version: 1.7.2

cpe:2.3:a:pivotal_software:spring_data_commons:1.7.2
Pivotal Software » Spring Data Commons » Version: 1.7.3

cpe:2.3:a:pivotal_software:spring_data_commons:1.7.3
Pivotal Software » Spring Data Commons » Version: 1.8.0

cpe:2.3:a:pivotal_software:spring_data_commons:1.8.0
Pivotal Software » Spring Data Commons » Version: 1.8.1

cpe:2.3:a:pivotal_software:spring_data_commons:1.8.1
Pivotal Software » Spring Data Commons » Version: 1.8.2

cpe:2.3:a:pivotal_software:spring_data_commons:1.8.2
Pivotal Software » Spring Data Commons » Version: 1.8.4

cpe:2.3:a:pivotal_software:spring_data_commons:1.8.4
Pivotal Software » Spring Data Commons » Version: 1.8.5

cpe:2.3:a:pivotal_software:spring_data_commons:1.8.5
Pivotal Software » Spring Data Commons » Version: 1.8.6

cpe:2.3:a:pivotal_software:spring_data_commons:1.8.6
Pivotal Software » Spring Data Commons » Version: 1.9.0

cpe:2.3:a:pivotal_software:spring_data_commons:1.9.0
Pivotal Software » Spring Data Commons » Version: 1.9.1

cpe:2.3:a:pivotal_software:spring_data_commons:1.9.1
Pivotal Software » Spring Data Commons » Version: 1.9.2

cpe:2.3:a:pivotal_software:spring_data_commons:1.9.2
Pivotal Software » Spring Data Commons » Version: 1.9.3

cpe:2.3:a:pivotal_software:spring_data_commons:1.9.3
Pivotal Software » Spring Data Commons » Version: 1.9.4

cpe:2.3:a:pivotal_software:spring_data_commons:1.9.4
Pivotal Software » Spring Data Commons » Version: 2.0.0

cpe:2.3:a:pivotal_software:spring_data_commons:2.0.0
Pivotal Software » Spring Data Commons » Version: 2.0.1

cpe:2.3:a:pivotal_software:spring_data_commons:2.0.1
Pivotal Software » Spring Data Commons » Version: 2.0.2

cpe:2.3:a:pivotal_software:spring_data_commons:2.0.2
Pivotal Software » Spring Data Commons » Version: 2.0.3

cpe:2.3:a:pivotal_software:spring_data_commons:2.0.3
Pivotal Software » Spring Data Commons » Version: 2.0.4

cpe:2.3:a:pivotal_software:spring_data_commons:2.0.4
Pivotal Software » Spring Data Commons » Version: 2.0.5

cpe:2.3:a:pivotal_software:spring_data_commons:2.0.5
Pivotal Software » Spring Data Rest » Version: 1.0.0

cpe:2.3:a:pivotal_software:spring_data_rest:1.0.0
Pivotal Software » Spring Data Rest » Version: 1.1.0

cpe:2.3:a:pivotal_software:spring_data_rest:1.1.0
Pivotal Software » Spring Data Rest » Version: 2.0.0

cpe:2.3:a:pivotal_software:spring_data_rest:2.0.0
Pivotal Software » Spring Data Rest » Version: 2.0.1

cpe:2.3:a:pivotal_software:spring_data_rest:2.0.1
Pivotal Software » Spring Data Rest » Version: 2.0.2

cpe:2.3:a:pivotal_software:spring_data_rest:2.0.2
Pivotal Software » Spring Data Rest » Version: 2.0.3

cpe:2.3:a:pivotal_software:spring_data_rest:2.0.3
Pivotal Software » Spring Data Rest » Version: 2.1.0

cpe:2.3:a:pivotal_software:spring_data_rest:2.1.0
Pivotal Software » Spring Data Rest » Version: 2.1.1

cpe:2.3:a:pivotal_software:spring_data_rest:2.1.1
Pivotal Software » Spring Data Rest » Version: 2.1.2

cpe:2.3:a:pivotal_software:spring_data_rest:2.1.2
Pivotal Software » Spring Data Rest » Version: 2.1.4

cpe:2.3:a:pivotal_software:spring_data_rest:2.1.4
Pivotal Software » Spring Data Rest » Version: 2.1.5

cpe:2.3:a:pivotal_software:spring_data_rest:2.1.5
Pivotal Software » Spring Data Rest » Version: 2.1.6

cpe:2.3:a:pivotal_software:spring_data_rest:2.1.6
Pivotal Software » Spring Data Rest » Version: 2.2.0

cpe:2.3:a:pivotal_software:spring_data_rest:2.2.0
Pivotal Software » Spring Data Rest » Version: 2.2.1

cpe:2.3:a:pivotal_software:spring_data_rest:2.2.1
Pivotal Software » Spring Data Rest » Version: 2.2.2

cpe:2.3:a:pivotal_software:spring_data_rest:2.2.2
Pivotal Software » Spring Data Rest » Version: 2.2.3

cpe:2.3:a:pivotal_software:spring_data_rest:2.2.3
Pivotal Software » Spring Data Rest » Version: 2.2.4

cpe:2.3:a:pivotal_software:spring_data_rest:2.2.4
Pivotal Software » Spring Data Rest » Version: 2.3.0

cpe:2.3:a:pivotal_software:spring_data_rest:2.3.0
Pivotal Software » Spring Data Rest » Version: 2.3.1

cpe:2.3:a:pivotal_software:spring_data_rest:2.3.1
Pivotal Software » Spring Data Rest » Version: 2.3.2

cpe:2.3:a:pivotal_software:spring_data_rest:2.3.2
Pivotal Software » Spring Data Rest » Version: 2.4.0

cpe:2.3:a:pivotal_software:spring_data_rest:2.4.0
Pivotal Software » Spring Data Rest » Version: 2.4.1

cpe:2.3:a:pivotal_software:spring_data_rest:2.4.1
Pivotal Software » Spring Data Rest » Version: 2.4.2

cpe:2.3:a:pivotal_software:spring_data_rest:2.4.2
Pivotal Software » Spring Data Rest » Version: 2.4.4

cpe:2.3:a:pivotal_software:spring_data_rest:2.4.4
Pivotal Software » Spring Data Rest » Version: 2.4.5

cpe:2.3:a:pivotal_software:spring_data_rest:2.4.5
Pivotal Software » Spring Data Rest » Version: 2.4.6

cpe:2.3:a:pivotal_software:spring_data_rest:2.4.6
Pivotal Software » Spring Data Rest » Version: 2.5.0

cpe:2.3:a:pivotal_software:spring_data_rest:2.5.0
Pivotal Software » Spring Data Rest » Version: 2.5.1

cpe:2.3:a:pivotal_software:spring_data_rest:2.5.1
Pivotal Software » Spring Data Rest » Version: 2.5.10

cpe:2.3:a:pivotal_software:spring_data_rest:2.5.10
Pivotal Software » Spring Data Rest » Version: 2.5.2

cpe:2.3:a:pivotal_software:spring_data_rest:2.5.2
Pivotal Software » Spring Data Rest » Version: 2.5.3

cpe:2.3:a:pivotal_software:spring_data_rest:2.5.3
Pivotal Software » Spring Data Rest » Version: 2.5.4

cpe:2.3:a:pivotal_software:spring_data_rest:2.5.4
Pivotal Software » Spring Data Rest » Version: 2.5.5

cpe:2.3:a:pivotal_software:spring_data_rest:2.5.5
Pivotal Software » Spring Data Rest » Version: 2.5.6

cpe:2.3:a:pivotal_software:spring_data_rest:2.5.6
Pivotal Software » Spring Data Rest » Version: 2.5.7

cpe:2.3:a:pivotal_software:spring_data_rest:2.5.7
Pivotal Software » Spring Data Rest » Version: 2.5.8

cpe:2.3:a:pivotal_software:spring_data_rest:2.5.8
Pivotal Software » Spring Data Rest » Version: 2.5.9

cpe:2.3:a:pivotal_software:spring_data_rest:2.5.9
Pivotal Software » Spring Data Rest » Version: 2.6.0

cpe:2.3:a:pivotal_software:spring_data_rest:2.6.0
Pivotal Software » Spring Data Rest » Version: 2.6.1

cpe:2.3:a:pivotal_software:spring_data_rest:2.6.1
Pivotal Software » Spring Data Rest » Version: 2.6.10

cpe:2.3:a:pivotal_software:spring_data_rest:2.6.10
Pivotal Software » Spring Data Rest » Version: 2.6.2

cpe:2.3:a:pivotal_software:spring_data_rest:2.6.2
Pivotal Software » Spring Data Rest » Version: 2.6.3

cpe:2.3:a:pivotal_software:spring_data_rest:2.6.3
Pivotal Software » Spring Data Rest » Version: 2.6.4

cpe:2.3:a:pivotal_software:spring_data_rest:2.6.4
Pivotal Software » Spring Data Rest » Version: 2.6.5

cpe:2.3:a:pivotal_software:spring_data_rest:2.6.5
Pivotal Software » Spring Data Rest » Version: 2.6.6

cpe:2.3:a:pivotal_software:spring_data_rest:2.6.6
Pivotal Software » Spring Data Rest » Version: 2.6.7

cpe:2.3:a:pivotal_software:spring_data_rest:2.6.7
Pivotal Software » Spring Data Rest » Version: 2.6.8

cpe:2.3:a:pivotal_software:spring_data_rest:2.6.8
Pivotal Software » Spring Data Rest » Version: 2.6.9

cpe:2.3:a:pivotal_software:spring_data_rest:2.6.9
Pivotal Software » Spring Data Rest » Version: 3.0.0

cpe:2.3:a:pivotal_software:spring_data_rest:3.0.0
Pivotal Software » Spring Data Rest » Version: 3.0.1

cpe:2.3:a:pivotal_software:spring_data_rest:3.0.1
Pivotal Software » Spring Data Rest » Version: 3.0.2

cpe:2.3:a:pivotal_software:spring_data_rest:3.0.2
Pivotal Software » Spring Data Rest » Version: 3.0.3

cpe:2.3:a:pivotal_software:spring_data_rest:3.0.3
Pivotal Software » Spring Data Rest » Version: 3.0.4

cpe:2.3:a:pivotal_software:spring_data_rest:3.0.4
Pivotal Software » Spring Data Rest » Version: 3.0.5

cpe:2.3:a:pivotal_software:spring_data_rest:3.0.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-1273

Products

Pricing

Contact Us