Spring Boot

Every one of the 15 is a mark on the map. Named now: 1 to 15, most at risk first.

1. Spring Boot server Web Observations DoS VulnerabilityCVE-2023-34055Spring · CVSS 5.3 · 1.2% likely
2. Additional information exposure with Spring Data JPA derived queriesCVE-2019-3797Spring · CVSS 3.5 · 1.1% likely

   CWE-89

3. In certain circumstances, Spring Boot's default web security is ineffective allowing unauthorized access to all endpoints. For an application to be vulnerable, it must: be a servl…CVE-2026-40976Spring · CVSS 9.1 · 0.5% likely

   CWE-862

4. Spring Boot EndpointRequest.to() creates wrong matcher if actuator endpoint is not exposedCVE-2025-22235Spring · CVSS 7.3 · 0.4% likely

   CWE-20

5. Authentication Bypass under Actuator Health groups pathsCVE-2026-22731Spring · CVSS 8.2 · 0.3% likely

   CWE-288

6. Values produced by ${random.value} are not suitable for use as secrets. ${random.uuid} is not affected. ${random.int} and ${random.long} should never be used for secrets as they a…CVE-2026-40975Spring · CVSS 4.8 · 0.3% likely

   CWE-330

7. An attacker on the same network as the remote application may be able to utilize a timing attack to discover information about the remote secret. In extreme circumstances this cou…CVE-2026-40972Spring · CVSS 7.5 · 0.3% likely

   CWE-208

8. Spring Boot's Cassandra auto-configuration does not perform hostname verification when establishing an SSL connection to Cassandra. Affected: Spring Boot 4.0.0–4.0.5 (fix 4.0.6),…CVE-2026-40974Spring · CVSS 5 · 0.2% likely

   CWE-295

9. When configured to use an SSL bundle, Spring Boot's RabbitMQ auto-configuration does not perform hostname verification when connecting to the RabbitMQ broker. Affected: Spring Boo…CVE-2026-40971Spring · CVSS 5 · 0.2% likely

   CWE-295

10. A local attacker on the same host as the application may be able to take control of the directory used by `ApplicationTemp`. When `server.servlet.session.persistent` is set to `tr…CVE-2026-40973Spring · CVSS 7 · 0.1% likely

    CWE-377

11. When configured to use an SSL bundle, Spring Boot's Elasticsearch auto-configuration does not perform hostname verification when connecting to the Elasticsearch server. Affected:…CVE-2026-40970Spring · CVSS 5 · 0.1% likely

    CWE-295

12. Mail Auto-Configuration Does Not Enable SSL Hostname VerificationCVE-2026-40992Spring · CVSS 5 · 0.1% likely

    CWE-295

13. CVE-2024-38807: Signature Forgery Vulnerability in Spring Boot's LoaderCVE-2024-38807Spring · CVSS 6.3 · 0.1% likely

    CWE-347

14. When an application is configured to use `ApplicationPidFileWriter`, a local attacker with write access to the PID file's location can corrupt one file on the host each time the a…CVE-2026-40977Spring · CVSS 4.7 · 0.1% likely

    CWE-59

15. Predictable Temp Directory in Artemis Auto-configurationCVE-2026-41001Spring · CVSS 5.3 · 0.1% likely

    CWE-377

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.