Vulnerabilities CVE-2026-47873

CVE-2026-47873

High

Open

TLP:CLEAR

Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfaces

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces (0.0.0.0) rather than restricting them to loopback. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier

Details

CVSS Score: 8.0
EPSS Score ⓘ: 0.18%

8.2th percentile
CVSS Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Confidence: 90%
Published: Jul 30, 2026
Last Modified: Aug 1, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.