VULNERABILITY INTELLIGENCE
CVE-2026-47873
CVSS score8 HIGH
EPSS probability0.29%
CISA KEVNot currently listed
Published2026-07-30
Last modified2026-10-23
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces (0.0.0.0) rather than restricting them to loopback. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-1327
Primary references
- security@vmware.com — Vendor Advisory