CVE-2026-47873
Received Received - Intake

Spring Tools for Eclipse Container Port Exposure

Publication date: 2026-07-30

Last updated on: 2026-07-30

Assigner: VMware

Description
The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces (0.0.0.0) rather than restricting them to loopback. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-30
Last Modified
2026-07-30
Generated
2026-07-30
AI Q&A
2026-07-30
EPSS Evaluated
N/A
NVD
CVE-2026-47873
EUVD
EUVD-2026-50972

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
vmware spring_tools_for_eclipse to 5.2.0 (exc)
spring tools_for_eclipse to 5.3.0 (exc)
spring tools_for_eclipse to 5.2.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

The vulnerability in Spring Tools' Boot Dashboard Docker integration exposes container control ports on all host network interfaces instead of restricting them to loopback. This allows unauthenticated access to debug and JMX ports, potentially enabling unauthorized control or data exposure.

Detection Guidance

Check if the Boot Dashboard Docker integration in Spring Tools is exposing ports on all network interfaces. Use commands like 'netstat -tuln' or 'ss -tuln' to list listening ports. Look for JDWP (port 8000) or JMX ports bound to 0.0.0.0 instead of 127.0.0.1.

Impact Analysis

An attacker could exploit this to gain unauthorized access to sensitive data or control the container remotely. This may lead to data breaches, system compromise, or further network infiltration if the host is part of a larger infrastructure.

Compliance Impact

This vulnerability could violate compliance requirements by exposing sensitive data to unauthorized parties. GDPR and HIPAA mandate strict access controls and data protection; unauthorized exposure risks significant penalties and reputational damage.

Mitigation Strategies

Upgrade Spring Tools for Eclipse to version 5.3.0 or later. If upgrading is not possible, disable the Boot Dashboard Docker integration or restrict network access to the exposed ports using firewall rules.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-47873. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart