VMware Spring Integration Zip vulnerabilities

3 CVEs affecting VMware Spring Integration Zip, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-22114, published 2021-03-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-1263, published 2018-05-15. Medium severity, CVSS 4.7. EPSS: 1.4% chance of exploitation in the next 30 days. Addresses partial fix in CVE-2018-1261. Pivotal spring-integration-zip, versions prior to 1.0.2, exposes an arbitrary file write vulnerability, that can be achieved using a specially crafted zip…
CVE-2018-1261, published 2018-05-11. Medium severity, CVSS 4.7. EPSS: 1.2% chance of exploitation in the next 30 days. Spring-integration-zip versions prior to 1.0.1 exposes an arbitrary file write vulnerability, which can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar,…
CVE-2021-22114, published 2021-03-01. Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days. Addresses partial fix in CVE-2018-1263. Spring-integration-zip, versions prior to 1.0.4, exposes an arbitrary file write vulnerability, that can be achieved using a specially crafted zip archive…