CVEvulnerability

CVE-2026-47861

6.3 MEDIUM Published 2026-08-27 Modified 2026-09-02 Official page ↗
Status
Analyzed
Published
2026-08-27
Last modified
2026-09-02
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Weaknesses
CWE-918

Description

An unauthenticated remote attacker who can send a single UDP packet to a Spring Integration UDP inbound adapter can cause the server to emit an outbound UDP datagram to an arbitrary internal or external host and port of the attacker's choosing. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10 Spring Integration 6.4.0 - 6.4.12 Spring Integration 5.5.21 and earlier

Affected configurations

• vmware spring integration (< 5.5.22) • vmware spring integration (>= 6.4.0 < 6.4.13) • vmware spring integration (>= 6.5.0 < 6.5.11) • vmware spring integration (>= 7.0.0 < 7.0.5.1) • vmware spring integration (>= 7.1.0 < 7.1.0.1)

Related

Weakness · CWE (1)

  • CWE-918 Server-Side Request Forgery weakness

References