CVE-2016-9878

high VMware
CVSS v3 Base Score
7.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
4.9%
Exploitation probability in 30 days
Top 10% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Confidentiality
High
Integrity
None
Availability
None
Published: December 29, 2016 (3424 days ago)
Last Modified: May 6, 2026
Vendor: VMware
Source: NVD

Description

An issue was discovered in Pivotal Spring Framework before 3.2.18, 4.2.x before 4.2.9, and 4.3.x before 4.3.5. Paths provided to the ResourceServlet were not properly sanitized and as a result exposed to directory traversal attacks.

CWE

CWE-22

Affected Products

pivotal software spring frameworkvmware spring framework

References

🔗 www.oracle.com 🔗 www.oracle.com 🔗 www.oracle.com 🔗 www.securityfocus.com 🔗 www.securitytracker.com