CVE-2014-3578

Directory traversal vulnerability in Pivotal Spring Framework 3.x before 3.2.9 and 4.0 before 4.0.5 allows remote attackers to read arbitrary files via a crafted URL.

View graph Watch Export

CVSS v3.1

—

EPSS

6.33%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

EPSS Trend

Aug 16, 2026 → Sep 7, 2026

▲ 0.12pp

6.21% → 6.33% over 2 tracked changes

Connections

2 relationships

CWE-22

source

Timeline

disclosure → media coverage

Feb 19, 2015

Disclosure — published as a CVE record. · last revised by NVD May 6, 2026