UpHeron
All vulnerabilities

Servers and applications

CVE-2018-1258

Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security. An unauthorized malicious user can gain unauthorized access to methods that should be restricted.

Severity
High 8.8
Published
11 May 2018
Last changed
25 Aug 2026
Added to UpHeron
1 Nov 2026
Exploit chance
2.5% in the next 30 daysHigher than 84% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Oracle WebLogic ServerServers and applications · cpe:a:oracle:weblogic_server
  • Version 10.3.6.0
  • Version 12.1.3.0
  • Version 12.2.1.2
  • Version 12.2.1.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2018-1258
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2018-1258