CVE-2026-47861

Katalog CVE

CVSS 6.3 · Medium EPSS 0,33%

Kerentanan Server-Side Request Forgery (SSRF) pada vmware spring integration. Skor CVSS 3.1 6.3 (Medium) menurut vmware.com.

Deskripsi (NVD)

An unauthenticated remote attacker who can send a single UDP packet to a Spring Integration UDP inbound adapter can cause the server to emit an outbound UDP datagram to an arbitrary internal or external host and port of the attacker's choosing. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10 Spring Integration 6.4.0 - 6.4.12 Spring Integration 5.5.21 and earlier

Rincian

Terbit di NVD

27 Agustus 2026

Terakhir diubah

2 September 2026

Status NVD

Analyzed

CVSS 3.1

6.3 (Medium), sumber vmware.com
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-918: Server-Side Request Forgery (SSRF)

EPSS (30 hari)

0,33% peluang dieksploitasi; lebih tinggi dari 24,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://spring.io/security/cve-2026-47861 advisory vendor