Pivotal Software Spring Batch Admin vulnerabilities

2 CVEs affecting Pivotal Software Spring Batch Admin, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-1230, published 2018-03-21.

More from Pivotal Software.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-1229, published 2018-03-21. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. Pivotal Spring Batch Admin, all versions, contains a stored XSS vulnerability in the file upload feature. An unauthenticated malicious user with network access to Spring Batch Admin could store an…
• CVE-2018-1230, published 2018-03-21. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Pivotal Spring Batch Admin, all versions, does not contain cross site request forgery protection. A remote unauthenticated user could craft a malicious site that executes requests to Spring Batch…