Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2022-22963

spring-cloud-function: Remote code execution by malicious Spring Expression

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.

CVSS 3.1 · 9.8 Critical EPSS 99.9% KEV · Listed
Vendors
Oracle Redhat Vmware
Products
Banking Branch Banking Cash Management Banking Corporate Lending Process Management and 26 more