Vulnerability Details CVE-2026-47873
The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces (0.0.0.0) rather than restricting them to loopback.
Affected Spring Products and Versions:
Spring Tools for Eclipse: 5.2.0 and earlier
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 19.8%
CVSS Severity
CVSS v3 Score 8.0
References
Products affected by CVE-2026-47873
-
cpe:2.3:a:broadcom:spring_tools:3.9.15
-
cpe:2.3:a:broadcom:spring_tools:3.9.7
-
cpe:2.3:a:broadcom:spring_tools:4.0.0
-
cpe:2.3:a:broadcom:spring_tools:4.0.1
-
cpe:2.3:a:broadcom:spring_tools:4.0.2
-
cpe:2.3:a:broadcom:spring_tools:4.1.1
-
cpe:2.3:a:broadcom:spring_tools:4.1.2
-
cpe:2.3:a:broadcom:spring_tools:4.10.0
-
cpe:2.3:a:broadcom:spring_tools:4.11.0
-
cpe:2.3:a:broadcom:spring_tools:4.11.1
-
cpe:2.3:a:broadcom:spring_tools:4.12.0
-
cpe:2.3:a:broadcom:spring_tools:4.12.1
-
cpe:2.3:a:broadcom:spring_tools:4.13.0
-
cpe:2.3:a:broadcom:spring_tools:4.13.1
-
cpe:2.3:a:broadcom:spring_tools:4.14.0
-
cpe:2.3:a:broadcom:spring_tools:4.14.1
-
cpe:2.3:a:broadcom:spring_tools:4.15.0
-
cpe:2.3:a:broadcom:spring_tools:4.15.1
-
cpe:2.3:a:broadcom:spring_tools:4.15.2
-
cpe:2.3:a:broadcom:spring_tools:4.15.3
-
cpe:2.3:a:broadcom:spring_tools:4.16.0
-
cpe:2.3:a:broadcom:spring_tools:4.16.1
-
cpe:2.3:a:broadcom:spring_tools:4.17.0
-
cpe:2.3:a:broadcom:spring_tools:4.17.1
-
cpe:2.3:a:broadcom:spring_tools:4.17.2
-
cpe:2.3:a:broadcom:spring_tools:4.18.0
-
cpe:2.3:a:broadcom:spring_tools:4.18.1
-
cpe:2.3:a:broadcom:spring_tools:4.19.0
-
cpe:2.3:a:broadcom:spring_tools:4.19.1
-
cpe:2.3:a:broadcom:spring_tools:4.2.0
-
cpe:2.3:a:broadcom:spring_tools:4.2.1
-
cpe:2.3:a:broadcom:spring_tools:4.2.2
-
cpe:2.3:a:broadcom:spring_tools:4.20.0
-
cpe:2.3:a:broadcom:spring_tools:4.20.1
-
cpe:2.3:a:broadcom:spring_tools:4.21.0
-
cpe:2.3:a:broadcom:spring_tools:4.21.1
-
cpe:2.3:a:broadcom:spring_tools:4.22.0
-
cpe:2.3:a:broadcom:spring_tools:4.22.1
-
cpe:2.3:a:broadcom:spring_tools:4.23.0
-
cpe:2.3:a:broadcom:spring_tools:4.23.1
-
cpe:2.3:a:broadcom:spring_tools:4.24.0
-
cpe:2.3:a:broadcom:spring_tools:4.25.0
-
cpe:2.3:a:broadcom:spring_tools:4.26.0
-
cpe:2.3:a:broadcom:spring_tools:4.27.0
-
cpe:2.3:a:broadcom:spring_tools:4.28.0
-
cpe:2.3:a:broadcom:spring_tools:4.28.1
-
cpe:2.3:a:broadcom:spring_tools:4.29.0
-
cpe:2.3:a:broadcom:spring_tools:4.29.1
-
cpe:2.3:a:broadcom:spring_tools:4.3.0
-
cpe:2.3:a:broadcom:spring_tools:4.3.1
-
cpe:2.3:a:broadcom:spring_tools:4.3.2
-
cpe:2.3:a:broadcom:spring_tools:4.30.0
-
cpe:2.3:a:broadcom:spring_tools:4.31.0
-
cpe:2.3:a:broadcom:spring_tools:4.32.0
-
cpe:2.3:a:broadcom:spring_tools:4.32.1
-
cpe:2.3:a:broadcom:spring_tools:4.32.2
-
cpe:2.3:a:broadcom:spring_tools:4.4.0
-
cpe:2.3:a:broadcom:spring_tools:4.4.1
-
cpe:2.3:a:broadcom:spring_tools:4.4.2
-
cpe:2.3:a:broadcom:spring_tools:4.5.0
-
cpe:2.3:a:broadcom:spring_tools:4.5.1
-
cpe:2.3:a:broadcom:spring_tools:4.6.0
-
cpe:2.3:a:broadcom:spring_tools:4.6.1
-
cpe:2.3:a:broadcom:spring_tools:4.6.2
-
cpe:2.3:a:broadcom:spring_tools:4.7.0
-
cpe:2.3:a:broadcom:spring_tools:4.7.1
-
cpe:2.3:a:broadcom:spring_tools:4.7.2
-
cpe:2.3:a:broadcom:spring_tools:4.8.0
-
cpe:2.3:a:broadcom:spring_tools:4.8.1
-
cpe:2.3:a:broadcom:spring_tools:4.9.0
-
cpe:2.3:a:broadcom:spring_tools:5.0.0
-
cpe:2.3:a:broadcom:spring_tools:5.0.1
-
cpe:2.3:a:broadcom:spring_tools:5.1.0
-
cpe:2.3:a:broadcom:spring_tools:5.1.1
-
cpe:2.3:a:broadcom:spring_tools:5.2.0