VDB
CVE-2024-38807
CVE-2024-38807
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Spring Boot ist ein Framework zur Entwicklung von Java Anwendungen. Spring Boot basiert auf dem Spring Framework.
EPSS 0.12% · 2.3th percentile
Risk Scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.12%
2.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Oracle Communications 15.0.0.0.0 | |
| Oracle | Oracle Communications 47.0.0.0.0 | |
| Oracle | Oracle Communications Applications <=6.0.5 | |
| Oracle | Oracle Communications Applications 7.5.0 | |
| Oracle | Oracle Communications Applications <=15.0.0.1 | |
| Oracle | Oracle Communications <=24.2.2 | |
| Oracle | Oracle Communications Applications 7.4.0 | |
| Oracle | Oracle Communications <=9.1.1.9 | |
| Oracle | Oracle Communications Applications 8.0.0.3 | |
| VMware Tanzu | VMware Tanzu Spring Boot <3.2.9 | |
| Oracle | Oracle Communications 23.4.0 | |
| Oracle | Oracle Communications 23.4.4 | |
| Oracle | Oracle Communications 24.2.3 | |
| Oracle | Oracle Communications 8.2.3.0.0 | |
| Oracle | Oracle Communications 15.0 | |
| Oracle | Oracle Communications Applications 7.4.1 | |
| Oracle | Oracle Communications 24.2.0 | |
| Oracle | Oracle Communications 9.2.0 | |
| VMware Tanzu | VMware Tanzu Spring Boot <3.1.13 | |
| Oracle | Oracle Communications 8.0 |
…and 31 more
Timeline
- Aug 22, 2024 CVE Published
- Aug 24, 2024 EPSS Score
- Sep 14, 2024 EPSS Score
- Oct 4, 2024 EPSS Score
- Oct 4, 2024 Coalition ESS Score
- Oct 25, 2024 EPSS Score
- Nov 14, 2024 EPSS Score
- Dec 6, 2024 EPSS Score
- Dec 26, 2024 EPSS Score
- Jan 16, 2025 EPSS Score
- Feb 5, 2025 EPSS Score
- Feb 26, 2025 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0148.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0148 advisory
- https://www.oracle.com/security-alerts/cpujan2025.html#AppendixCGBU advisory
- https://www.ibm.com/support/pages/node/7282652 advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1916.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1916 advisory
- https://spring.io/blog/2024/08/23/spring-boot-releases-fix-for-cve-2024-38807 advisory
- https://spring.io/security/cve-2024-38807 advisory
- https://security.netapp.com/advisory/ntap-20250117-0006/ advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0135.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0135 advisory
- https://www.oracle.com/security-alerts/cpujan2025.html#AppendixCAGBU advisory