目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

Spring 厂商漏洞列表 / CVE 中文分析 247

Spring 厂商相关 247 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Spring 是由 Pivotal 开发的 Java 应用框架，广泛用于构建企业级后端服务。其生态庞大，历史漏洞涵盖远程代码执行、反序列化攻击及越权访问等高危类型，累计收录 CVE 达 72 条。安全团队需重点关注组件依赖版本，防范因配置不当或旧版库缺陷引发的风险。尽管框架本身提供安全机制，但开发者需严格遵循最佳实践，及时修补已知漏洞，以保障系统整体安全性。

Top products by Spring: Spring Framework Spring Security Spring AI Spring Integration Spring Boot Spring Cloud Config Spring for GraphQL Spring Cloud Function Spring Web Services Spring AMQP Reactor Netty Spring For Apache Kafka Spring Data REST Spring Tools for Eclipse Spring Cloud Stream Spring Batch Spring Data Commons Micrometer Spring Spring HATEOAS Spring Cloud Gateway Spring Web Flow Spring Data MongoDB Reactor Core Spring gRPC Spring Data JPA Spring LDAP Spring Security OAuth Cloud Gateway Spring Cloud Commons
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-59323 VMware Spring 安全漏洞 — Micrometer Tracing 5.3 Medium 2026-08-21
CVE-2026-59326 Spring Tools for Eclipse 日志信息泄露漏洞 — Spring Tools for Eclipse 3.3 Low 2026-07-30
CVE-2026-59328 Spring Tools for Eclipse 跨站脚本漏洞 — Spring Tools for Eclipse 4.2 Medium 2026-07-30
CVE-2026-59327 Spring Tools for Eclipse 加密问题漏洞 — Spring Tools for Eclipse 4.4 Medium 2026-07-30
CVE-2026-47882 Spring Tools for Eclipse 加密问题漏洞 — Spring Tools for Eclipse 8.3 High 2026-07-30
CVE-2026-47873 Spring Tools for Eclipse 配置错误漏洞 — Spring Tools for Eclipse 8.0 High 2026-07-30
CVE-2026-47858 Spring Tools for Eclipse 授权问题漏洞 — Spring Tools for Eclipse 8.0 High 2026-07-30
CVE-2026-41862 Spring Statemachine 反序列化注入漏洞 — Spring Statemachine CWE-502 8.8 High 2026-06-23
CVE-2026-47825 Spring Cloud Gateway 输入验证错误漏洞 — Spring Cloud Gateway CWE-346 8.6 High 2026-06-15
CVE-2026-41708 Spring Cloud Sleuth 资源管理错误漏洞 — Spring Cloud Sleuth CWE-400 7.5 High 2026-06-15
CVE-2026-47835 Spring AI 输入验证错误漏洞 — Spring AI CWE-943 8.6 High 2026-06-15
CVE-2026-41856 VMware Spring for GraphQL 访问控制错误漏洞 — Spring for GraphQL CWE-284 7.5 High 2026-06-11
CVE-2026-41700 VMware Spring for GraphQL 访问控制错误漏洞 — Spring for GraphQL CWE-346 8.1 High 2026-06-11
CVE-2026-41699 VMware Spring for GraphQL 代码问题漏洞 — Spring for GraphQL CWE-502 8.1 High 2026-06-11
CVE-2026-41001 VMware Spring Boot 安全漏洞 — Spring Boot CWE-377 5.3 Medium 2026-06-11
CVE-2026-41000 VMware Spring Web Services 安全漏洞 — Spring Web Services CWE-294 3.7 Low 2026-06-11
CVE-2026-40999 VMware Spring Web Services 代码问题漏洞 — Spring Web Services CWE-918 8.6 High 2026-06-11
CVE-2026-40998 VMware Spring Web Services 代码问题漏洞 — Spring Web Services CWE-611 8.2 High 2026-06-11
CVE-2026-40997 VMware Spring Web Services 安全漏洞 — Spring Web Services CWE-209 5.3 Medium 2026-06-11
CVE-2026-40996 VMware Spring Web Services 加密问题漏洞 — Spring Web Services CWE-327 4.8 Medium 2026-06-11
CVE-2026-40995 VMware Spring Web Services 授权问题漏洞 — Spring Web Services CWE-287 5.4 Medium 2026-06-11
CVE-2026-40994 VMware Spring Web Services 安全漏洞 — Spring Web Services CWE-1188 8.2 High 2026-06-11
CVE-2026-40992 VMware Spring Boot 信任管理问题漏洞 — Spring Boot CWE-295 5.0 Medium 2026-06-11
CVE-2026-40987 VMware Spring Integration 路径遍历漏洞 — Spring Integration CWE-22 7.1 High 2026-06-11
CVE-2026-40986 VMware Spring Web Flow 跨站脚本漏洞 — Spring Web Flow CWE-79 4.8 Medium 2026-06-11
CVE-2026-40985 VMware Spring Web Flow 安全漏洞 — Spring Web Flow CWE-917 6.4 Medium 2026-06-11
CVE-2026-47838 Spring Security 授权问题漏洞 — Spring Security CWE-287 6.8 Medium 2026-06-09
CVE-2026-41837 VMware Spring Data REST 访问控制错误漏洞 — Spring Data REST CWE-284 5.3 Medium 2026-06-09
CVE-2026-41732 VMware Spring for Apache Pulsar 代码问题漏洞 — Spring for Apache Pulsar CWE-502 8.1 High 2026-06-09
CVE-2026-41731 VMware Spring for Apache Kafka 代码问题漏洞 — Spring for Apache Kafka CWE-502 8.1 High 2026-06-09

本页汇总了 Spring 厂商截至目前公开的全部 247 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。