CVE:CVE-2018-15756
CNNVD:CNNVD-201810-1051
Vmware Spring Framework是美国威睿（Vmware）公司的一套开源的Java、JavaEE应用程序框架。该框架可帮助开发人员构建高质量的应用。
Spring Framework中存在资源管理错误漏洞。该漏洞源于网络系统或产品对系统资源（如内存、磁盘空间、文件等）的管理不当。以下版本受到影响：Pivotal Spring Framework 5.1版本，5.0.10之前的5.0.x版本，4.3.20之前的4.3.x版本，4.2.x版本。
solution:Upgrade vmware spring_framework to a higher version than 4.3.20,5.0.10,5.1.0,and avoid the version [4.2.0,4.3.20),[5.0.0,5.0.10),5.1.0; Upgrade oracle agile_plm to a higher version than 9.3.3,9.3.4,9.3.5,9.3.6,and avoid the version 9.3.3,9.3.4,9.3.5,9.3.6; Upgrade oracle communications_brm_-_elastic_charging_engine to a higher version than 11.3,12.0,and avoid the version 11.3,12.0; Upgrade oracle communications_converged_application_server_-_service_controller to a higher version than 6.0,6.1,and avoid the version 6.0,6.1; Upgrade oracle communications_diameter_signaling_router to a higher version than 8.0.0,8.1,8.2,8.2.1,and avoid the version 8.0.0,8.1,8.2,8.2.1; Upgrade oracle communications_element_manager to a higher version than 8.1.1,8.2.0,8.2.1,and avoid the version 8.1.1,8.2.0,8.2.1; Upgrade oracle communications_online_mediation_controller to a higher version than 6.1,and avoid the version 6.1; Upgrade oracle communications_session_report_manager to a higher version than 8.0.0,8.1.0,8.1.1,8.2.0,8.2.1,and avoid the version 8.0.0,8.1.0,8.1.1,8.2.0,8.2.1; Upgrade oracle communications_session_route_manager to a higher version than 8.0.0,8.1.0,8.1.1,8.2.0,8.2.1,and avoid the version 8.0.0,8.1.0,8.1.1,8.2.0,8.2.1; Upgrade oracle communications_unified_inventory_management to a higher version than 7.3,7.4.0,and avoid the version 7.3,7.4.0; Upgrade oracle endeca_information_discovery_integrator to a higher version than 3.2.0,and avoid the version 3.2.0; Upgrade oracle enterprise_manager_for_fusion_applications to a higher version than 13.3.0.0,and avoid the version 13.3.0.0; Upgrade oracle enterprise_manager_ops_center to a higher version than 12.3.3,and avoid the version 12.3.3; Upgrade oracle financial_services_analytical_applications_infrastructure to a higher version than 8.0.8,and avoid the version [8.0.2,8.0.8]; Upgrade oracle flexcube_private_banking to a higher version than 12.0.1,12.0.3,12.1.0,and avoid the version 12.0.1,12.0.3,12.1.0; Upgrade oracle goldengate_application_adapters to a higher version than 12.3.2.1.0,and avoid the version 12.3.2.1.0; Upgrade oracle healthcare_master_person_index to a higher version than 3.0,4.0.2,and avoid the version 3.0,4.0.2; Upgrade oracle identity_manager_connector to a higher version than 9.0,and avoid the version 9.0; Upgrade oracle insurance_calculation_engine to a higher version than 9.7,10.0,10.1,10.2,and avoid the version 9.7,10.0,10.1,10.2; Upgrade oracle insurance_policy_administration_j2ee to a higher version than 10.0,10.1,10.2,10.2.0,10.2.4,11.0,11.1.0,11.2.0,and avoid the version 10.0,10.1,10.2,10.2.0,10.2.4,11.0,11.1.0,11.2.0; Upgrade oracle insurance_rules_palette to a higher version than 10.0,10.1,10.2,10.2.0,10.2.4,11.0,11.0.2,11.1.0,11.2.0,and avoid the version 10.0,10.1,10.2,10.2.0,10.2.4,11.0,11.0.2,11.1.0,11.2.0; Upgrade oracle mysql_enterprise_monitor to a higher version than 4.0.12,8.0.20,and avoid the version (,4.0.12],[8.0.0,8.0.20]; Upgrade oracle primavera_analytics to a higher version than 18.8,and avoid the version 18.8; Upgrade oracle primavera_gateway to a higher version than 15.2,16.2,17.12,18.8.0,and avoid the version 15.2,16.2,17.12,18.8.0; Upgrade oracle rapid_planning to a higher version than 12.1,12.2,and avoid the version 12.1,12.2; Upgrade oracle retail_advanced_inventory_planning to a higher version than 15.0,and avoid the version 15.0; Upgrade oracle retail_assortment_planning to a higher version than 15.0,16.0,and avoid the version 15.0,16.0; Upgrade oracle retail_clearance_optimization_engine to a higher version than 14.0.5,and avoid the version 14.0.5; Upgrade oracle retail_financial_integration to a higher version than 14.0,14.1,15.0,16.0,and avoid the version 14.0,14.1,15.0,16.0; Upgrade oracle retail_integration_bus to a higher version than 15.0,15.0.3,16.0,16.0.3,and avoid the version 15.0,15.0.3,16.0,16.0.3; Upgrade oracle retail_invoice_matching to a higher version than 12.0,13.0,13.1,13.2,14.0,14.1,and avoid the version 12.0,13.0,13.1,13.2,14.0,14.1; Upgrade oracle retail_markdown_optimization to a higher version than 13.4.4,and avoid the version 13.4.4; Upgrade oracle retail_order_broker to a higher version than 5.1,5.2,15.0,16.0,and avoid the version 5.1,5.2,15.0,16.0; Upgrade oracle retail_predictive_application_server to a higher version than 14.0.3,14.0.3.26,14.1.3,14.1.3.37,15.0.3,15.0.3.100,16.0,16.0.3,and avoid the version 14.0.3,14.0.3.26,14.1.3,14.1.3.37,15.0.3,15.0.3.100,16.0,16.0.3; Upgrade oracle retail_service_backbone to a higher version than 15.0,16.0,16.0.1,and avoid the version 15.0,16.0,16.0.1; Upgrade oracle retail_xstore_point_of_service to a higher version than 7.1,and avoid the version 7.1; Upgrade oracle tape_library_acsls to a higher version than 8.5,and avoid the version 8.5; Upgrade oracle webcenter_sites to a higher version than 12.2.1.3.0,and avoid the version 12.2.1.3.0; Upgrade oracle weblogic_server to a higher version than 10.3.6.0.0,12.1.3.0.0,12.2.1.3.0,12.2.1.4.0,and avoid the version 10.3.6.0.0,12.1.3.0.0,12.2.1.3.0,12.2.1.4.0; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0