CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-8046

Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions prior to 3.0.1 (Kay SR1) and Spring Boot versions prior to 1.5.9, 2.0 M6 can use specially crafted JSON data to run arbitrary Java code.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.94

EPSS Ranking 99.9%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2017-8046

Pivotal Software » Spring Data Rest » Version: 1.0.0

cpe:2.3:a:pivotal_software:spring_data_rest:1.0.0
Pivotal Software » Spring Data Rest » Version: 1.1.0

cpe:2.3:a:pivotal_software:spring_data_rest:1.1.0
Pivotal Software » Spring Data Rest » Version: 2.0.0

cpe:2.3:a:pivotal_software:spring_data_rest:2.0.0
Pivotal Software » Spring Data Rest » Version: 2.0.1

cpe:2.3:a:pivotal_software:spring_data_rest:2.0.1
Pivotal Software » Spring Data Rest » Version: 2.0.2

cpe:2.3:a:pivotal_software:spring_data_rest:2.0.2
Pivotal Software » Spring Data Rest » Version: 2.0.3

cpe:2.3:a:pivotal_software:spring_data_rest:2.0.3
Pivotal Software » Spring Data Rest » Version: 2.1.0

cpe:2.3:a:pivotal_software:spring_data_rest:2.1.0
Pivotal Software » Spring Data Rest » Version: 2.1.1

cpe:2.3:a:pivotal_software:spring_data_rest:2.1.1
Pivotal Software » Spring Data Rest » Version: 2.1.2

cpe:2.3:a:pivotal_software:spring_data_rest:2.1.2
Pivotal Software » Spring Data Rest » Version: 2.1.4

cpe:2.3:a:pivotal_software:spring_data_rest:2.1.4
Pivotal Software » Spring Data Rest » Version: 2.1.5

cpe:2.3:a:pivotal_software:spring_data_rest:2.1.5
Pivotal Software » Spring Data Rest » Version: 2.1.6

cpe:2.3:a:pivotal_software:spring_data_rest:2.1.6
Pivotal Software » Spring Data Rest » Version: 2.2.0

cpe:2.3:a:pivotal_software:spring_data_rest:2.2.0
Pivotal Software » Spring Data Rest » Version: 2.2.1

cpe:2.3:a:pivotal_software:spring_data_rest:2.2.1
Pivotal Software » Spring Data Rest » Version: 2.2.2

cpe:2.3:a:pivotal_software:spring_data_rest:2.2.2
Pivotal Software » Spring Data Rest » Version: 2.2.3

cpe:2.3:a:pivotal_software:spring_data_rest:2.2.3
Pivotal Software » Spring Data Rest » Version: 2.2.4

cpe:2.3:a:pivotal_software:spring_data_rest:2.2.4
Pivotal Software » Spring Data Rest » Version: 2.3.0

cpe:2.3:a:pivotal_software:spring_data_rest:2.3.0
Pivotal Software » Spring Data Rest » Version: 2.3.1

cpe:2.3:a:pivotal_software:spring_data_rest:2.3.1
Pivotal Software » Spring Data Rest » Version: 2.3.2

cpe:2.3:a:pivotal_software:spring_data_rest:2.3.2
Pivotal Software » Spring Data Rest » Version: 2.4.0

cpe:2.3:a:pivotal_software:spring_data_rest:2.4.0
Pivotal Software » Spring Data Rest » Version: 2.4.1

cpe:2.3:a:pivotal_software:spring_data_rest:2.4.1
Pivotal Software » Spring Data Rest » Version: 2.4.2

cpe:2.3:a:pivotal_software:spring_data_rest:2.4.2
Pivotal Software » Spring Data Rest » Version: 2.4.4

cpe:2.3:a:pivotal_software:spring_data_rest:2.4.4
Pivotal Software » Spring Data Rest » Version: 2.4.5

cpe:2.3:a:pivotal_software:spring_data_rest:2.4.5
Pivotal Software » Spring Data Rest » Version: 2.4.6

cpe:2.3:a:pivotal_software:spring_data_rest:2.4.6
Pivotal Software » Spring Data Rest » Version: 2.5.0

cpe:2.3:a:pivotal_software:spring_data_rest:2.5.0
Pivotal Software » Spring Data Rest » Version: 2.5.1

cpe:2.3:a:pivotal_software:spring_data_rest:2.5.1
Pivotal Software » Spring Data Rest » Version: 2.5.10

cpe:2.3:a:pivotal_software:spring_data_rest:2.5.10
Pivotal Software » Spring Data Rest » Version: 2.5.11

cpe:2.3:a:pivotal_software:spring_data_rest:2.5.11
Pivotal Software » Spring Data Rest » Version: 2.5.2

cpe:2.3:a:pivotal_software:spring_data_rest:2.5.2
Pivotal Software » Spring Data Rest » Version: 2.5.3

cpe:2.3:a:pivotal_software:spring_data_rest:2.5.3
Pivotal Software » Spring Data Rest » Version: 2.5.4

cpe:2.3:a:pivotal_software:spring_data_rest:2.5.4
Pivotal Software » Spring Data Rest » Version: 2.5.5

cpe:2.3:a:pivotal_software:spring_data_rest:2.5.5
Pivotal Software » Spring Data Rest » Version: 2.5.6

cpe:2.3:a:pivotal_software:spring_data_rest:2.5.6
Pivotal Software » Spring Data Rest » Version: 2.5.7

cpe:2.3:a:pivotal_software:spring_data_rest:2.5.7
Pivotal Software » Spring Data Rest » Version: 2.5.8

cpe:2.3:a:pivotal_software:spring_data_rest:2.5.8
Pivotal Software » Spring Data Rest » Version: 2.5.9

cpe:2.3:a:pivotal_software:spring_data_rest:2.5.9
Pivotal Software » Spring Data Rest » Version: 2.6

cpe:2.3:a:pivotal_software:spring_data_rest:2.6
Pivotal Software » Spring Data Rest » Version: 2.6.0

cpe:2.3:a:pivotal_software:spring_data_rest:2.6.0
Pivotal Software » Spring Data Rest » Version: 2.6.1

cpe:2.3:a:pivotal_software:spring_data_rest:2.6.1
Pivotal Software » Spring Data Rest » Version: 2.6.2

cpe:2.3:a:pivotal_software:spring_data_rest:2.6.2
Pivotal Software » Spring Data Rest » Version: 2.6.3

cpe:2.3:a:pivotal_software:spring_data_rest:2.6.3
Pivotal Software » Spring Data Rest » Version: 2.6.4

cpe:2.3:a:pivotal_software:spring_data_rest:2.6.4
Pivotal Software » Spring Data Rest » Version: 2.6.5

cpe:2.3:a:pivotal_software:spring_data_rest:2.6.5
Pivotal Software » Spring Data Rest » Version: 2.6.6

cpe:2.3:a:pivotal_software:spring_data_rest:2.6.6
Pivotal Software » Spring Data Rest » Version: 2.6.7

cpe:2.3:a:pivotal_software:spring_data_rest:2.6.7
Pivotal Software » Spring Data Rest » Version: 2.6.8

cpe:2.3:a:pivotal_software:spring_data_rest:2.6.8
Pivotal Software » Spring Data Rest » Version: 3.0.0

cpe:2.3:a:pivotal_software:spring_data_rest:3.0.0
Vmware » Spring Boot » Version: 0.5.0

cpe:2.3:a:vmware:spring_boot:0.5.0
Vmware » Spring Boot » Version: 1.0.0

cpe:2.3:a:vmware:spring_boot:1.0.0
Vmware » Spring Boot » Version: 1.0.1

cpe:2.3:a:vmware:spring_boot:1.0.1
Vmware » Spring Boot » Version: 1.0.2

cpe:2.3:a:vmware:spring_boot:1.0.2
Vmware » Spring Boot » Version: 1.1.0

cpe:2.3:a:vmware:spring_boot:1.1.0
Vmware » Spring Boot » Version: 1.1.1

cpe:2.3:a:vmware:spring_boot:1.1.1
Vmware » Spring Boot » Version: 1.1.10

cpe:2.3:a:vmware:spring_boot:1.1.10
Vmware » Spring Boot » Version: 1.1.11

cpe:2.3:a:vmware:spring_boot:1.1.11
Vmware » Spring Boot » Version: 1.1.12

cpe:2.3:a:vmware:spring_boot:1.1.12
Vmware » Spring Boot » Version: 1.1.2

cpe:2.3:a:vmware:spring_boot:1.1.2
Vmware » Spring Boot » Version: 1.1.3

cpe:2.3:a:vmware:spring_boot:1.1.3
Vmware » Spring Boot » Version: 1.1.4

cpe:2.3:a:vmware:spring_boot:1.1.4
Vmware » Spring Boot » Version: 1.1.5

cpe:2.3:a:vmware:spring_boot:1.1.5
Vmware » Spring Boot » Version: 1.1.6

cpe:2.3:a:vmware:spring_boot:1.1.6
Vmware » Spring Boot » Version: 1.1.7

cpe:2.3:a:vmware:spring_boot:1.1.7
Vmware » Spring Boot » Version: 1.1.8

cpe:2.3:a:vmware:spring_boot:1.1.8
Vmware » Spring Boot » Version: 1.1.9

cpe:2.3:a:vmware:spring_boot:1.1.9
Vmware » Spring Boot » Version: 1.2.0

cpe:2.3:a:vmware:spring_boot:1.2.0
Vmware » Spring Boot » Version: 1.2.1

cpe:2.3:a:vmware:spring_boot:1.2.1
Vmware » Spring Boot » Version: 1.2.2

cpe:2.3:a:vmware:spring_boot:1.2.2
Vmware » Spring Boot » Version: 1.2.3

cpe:2.3:a:vmware:spring_boot:1.2.3
Vmware » Spring Boot » Version: 1.2.4

cpe:2.3:a:vmware:spring_boot:1.2.4
Vmware » Spring Boot » Version: 1.2.5

cpe:2.3:a:vmware:spring_boot:1.2.5
Vmware » Spring Boot » Version: 1.2.6

cpe:2.3:a:vmware:spring_boot:1.2.6
Vmware » Spring Boot » Version: 1.2.7

cpe:2.3:a:vmware:spring_boot:1.2.7
Vmware » Spring Boot » Version: 1.2.8

cpe:2.3:a:vmware:spring_boot:1.2.8
Vmware » Spring Boot » Version: 1.3.0

cpe:2.3:a:vmware:spring_boot:1.3.0
Vmware » Spring Boot » Version: 1.3.1

cpe:2.3:a:vmware:spring_boot:1.3.1
Vmware » Spring Boot » Version: 1.3.2

cpe:2.3:a:vmware:spring_boot:1.3.2
Vmware » Spring Boot » Version: 1.3.3

cpe:2.3:a:vmware:spring_boot:1.3.3
Vmware » Spring Boot » Version: 1.3.4

cpe:2.3:a:vmware:spring_boot:1.3.4
Vmware » Spring Boot » Version: 1.3.5

cpe:2.3:a:vmware:spring_boot:1.3.5
Vmware » Spring Boot » Version: 1.3.6

cpe:2.3:a:vmware:spring_boot:1.3.6
Vmware » Spring Boot » Version: 1.3.7

cpe:2.3:a:vmware:spring_boot:1.3.7
Vmware » Spring Boot » Version: 1.3.8

cpe:2.3:a:vmware:spring_boot:1.3.8
Vmware » Spring Boot » Version: 1.4.0

cpe:2.3:a:vmware:spring_boot:1.4.0
Vmware » Spring Boot » Version: 1.4.1

cpe:2.3:a:vmware:spring_boot:1.4.1
Vmware » Spring Boot » Version: 1.4.2

cpe:2.3:a:vmware:spring_boot:1.4.2
Vmware » Spring Boot » Version: 1.4.3

cpe:2.3:a:vmware:spring_boot:1.4.3
Vmware » Spring Boot » Version: 1.4.4

cpe:2.3:a:vmware:spring_boot:1.4.4
Vmware » Spring Boot » Version: 1.4.5

cpe:2.3:a:vmware:spring_boot:1.4.5
Vmware » Spring Boot » Version: 1.4.6

cpe:2.3:a:vmware:spring_boot:1.4.6
Vmware » Spring Boot » Version: 1.4.7

cpe:2.3:a:vmware:spring_boot:1.4.7
Vmware » Spring Boot » Version: 1.5.0

cpe:2.3:a:vmware:spring_boot:1.5.0
Vmware » Spring Boot » Version: 1.5.1

cpe:2.3:a:vmware:spring_boot:1.5.1
Vmware » Spring Boot » Version: 1.5.2

cpe:2.3:a:vmware:spring_boot:1.5.2
Vmware » Spring Boot » Version: 1.5.3

cpe:2.3:a:vmware:spring_boot:1.5.3
Vmware » Spring Boot » Version: 1.5.4

cpe:2.3:a:vmware:spring_boot:1.5.4
Vmware » Spring Boot » Version: 1.5.5

cpe:2.3:a:vmware:spring_boot:1.5.5
Vmware » Spring Boot » Version: 1.5.6

cpe:2.3:a:vmware:spring_boot:1.5.6
Vmware » Spring Boot » Version: 1.5.7

cpe:2.3:a:vmware:spring_boot:1.5.7
Vmware » Spring Boot » Version: 1.5.8

cpe:2.3:a:vmware:spring_boot:1.5.8
Vmware » Spring Boot » Version: 2.0.0

cpe:2.3:a:vmware:spring_boot:2.0.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-8046

Products

Pricing

Contact Us