What’s Vulnerable › Products

Spring Tools for Eclipse vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your Spring Tools for Eclipse version is affected

Latest Spring Tools for Eclipse vulnerabilities

• CVE-2026-59328 — Cross-Site Scripting in Eclipse Spring Boot Starter Wizard Dependency Tooltips (CVSS 5.4)
• CVE-2026-59327 — Cleartext Storage of Spring Boot DevTools Remote Secret in Eclipse Launch Configurations (CVSS 4.4)
• CVE-2026-59326 — HTTP Proxy Credentials Logged in Plaintext by the Spring Boot Language Server (CVSS 3.3)
• CVE-2026-47882 — Spring Boot DevTools remote secret generated with a non-cryptographic PRNG (CVSS 8.3)
• CVE-2026-47873 — Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfaces (CVSS 8.0)
• CVE-2026-47858 — live information startup mode is vulnerable for remote code execution (CVSS 8.0)