Skip to content
OpenAdvisories

Product · Spring

Spring Tools for Eclipse

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.3
    CVE-2026-47882

    Spring Boot DevTools remote secret generated with a non-cryptographic PRNG

    When enabling Spring Boot DevTools support for a remote application target (for example a Docker container or Cloud Foundry app) from the Spring Tools Boot Dashboard, Spring Tools generates a shared secret that authenticates DevTools remote-restart uploads to…

    Spring Spring Tools for Eclipse
  • High 8.0
    CVE-2026-47873

    Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfaces

    The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces (0.0.0.0) rather than restricting them to loopback. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earl…

    Spring Spring Tools for Eclipse
  • High 8.0
    CVE-2026-47858 Public exploit

    live information startup mode is vulnerable for remote code execution

    Starting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running application vulnerable against JMX-based remote code execution. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier S…

    Spring Spring Tools for Eclipse Spring Tools for VSCode / Cursor / Theia