CVE-2018-1270Suited to automated attack · CISA
Code injection in Spring By Pivotal Spring Framework
CVSS score
9.8
EPSS probability
%77.5
Risk score
7.6
Published
8 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
mprunet/owasp-formation-cve-2018-1270
Makefile Go / Python
Similar Vulnerabilities
10.0
CVE-2021-44228 Actively exploited
Improper input validation in Apache Log4j
S
Patch verified Public Exploits:22EPSS %100
10.0
CVE-2015-3306 Actively exploited
Improper access control in N/a
N
Workaround Public Exploits:5EPSS %99
9.8
CVE-2021-21985 Actively exploited
Vulnerability in N/a VMware vCenter Server And VMware Cloud Foundation
N
Workaround Public Exploits:10EPSS %100
9.8
CVE-2021-21972 Actively exploited
Vulnerability in N/a VMware vCenter Server
N
Workaround Public Exploits:11EPSS %100
9.8
CVE-2025-61882 Actively exploited
Improper authentication in Oracle Corporation Oracle Concurrent Processing
OC
Workaround Public Exploits:1EPSS %100
9.8
CVE-2020-1938 Actively exploited
Vulnerability in Apache Tomcat
A
Patch verified Public Exploits:12EPSS %99
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2018-1270"