Skip to content
OpenAdvisories

Product · Spring

Spring Tools for Eclipse

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.0
    CVE-2026-47858 Public exploit

    live information startup mode is vulnerable for remote code execution

    Starting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running application vulnerable against JMX-based remote code execution. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier S…

    Spring Spring Tools for Eclipse Spring Tools for VSCode / Cursor / Theia