CVE-2018-1273 CISA KEV · Actively exploitedLinked to ransomwareSuited to automated attack · CISA
Code injection in Spring By Pivotal Spring Framework
CVSS score
9.8
EPSS probability
%97.0
Risk score
19.0
Published
8 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Vulhub spring/CVE-2018-1273: Spring Data Commons SpEL Injection (CVE-2018-1273), run with Isoloom
Makefile Go / Python
GitHub
Environment for CVE-2018-1273 (Spring Data Commons)
Makefile Go / Python
Nuclei: Spring Data Commons - Remote Code Execution
Makefile Go / Python
Similar Vulnerabilities
10.0
CVE-2021-44228 Actively exploited
Improper input validation in Apache Log4j
S
Patch verifiedEPSS %100
9.8
CVE-2021-21985 Actively exploited
Vulnerability in N/a VMware vCenter Server And VMware Cloud Foundation
N
WorkaroundEPSS %100
9.8
CVE-2017-5638 Actively exploited
struts2: RCE when performing file upload based on Jakarta Multipart parser
A
WorkaroundEPSS %100
9.8
CVE-2018-11776 Actively exploited
struts2: Using specific results and namespaces can result in a remote code execution
A
WorkaroundEPSS %100
9.8
CVE-2023-46604 Actively exploited
activemq-openwire: OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack
RH
Partial patchEPSS %100
9.8
CVE-2021-21972 Actively exploited
Vulnerability in N/a VMware vCenter Server
N
WorkaroundEPSS %100
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2018-1273"