Vmware Spring Framework 安全漏洞

🗓️ 06 Jan 2022 00:00:00Reported by China National Vulnerability Database of Information SecurityType

cnnvd

cnnvd🔗 www.cnnvd.org.cn👁 2 Views

A VMware Spring Framework security flaw lets attackers bypass access log injection to modify data.

Reporter	Title	Published	Views	Family All 34
IBM Security Bulletins	Security Bulletin: IBM MaaS360 Cloud Extender Agent, Mobile Enterprise Gateway and VPN module have multiple vulnerabilities (CVE-2021-22060, CVE-2022-22950, CVE-2022-0547, CVE-2022-0778, CVE-2022-22965)	6 Jun 202218:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Controller has addressed multiple vulnerabilities	2 Dec 202219:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilites in IBM Rational Build Forge.	2 Mar 202608:30	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities Spring Boot, Spring Security and Spring Framework might affect IBM Storage Copy Data Management	22 Mar 202416:06	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Spring Framework affects IBM Tivoli Application Dependency Discovery Manager (CVE-2022-22950, CVE-2021-22096, CVE-2022-22968, CVE-2021-22060).	12 May 202218:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling B2B Integrator vulnerable to security bypass due to Spring Framework (CVE-2021-22060)	17 Oct 202212:56	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Spring Core affect watsonx.data	10 Feb 202510:33	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in [All] Spring Framework - CVE-2021-22060 (Publicly disclosed vulnerability) impacts IBM Watson Machine Learning Accelerator	23 Mar 202202:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Spring	30 Mar 202215:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities including a remote code execution in Spring Framework (CVE-2022-22965)	11 Apr 202215:17	–	ibm

Source	Link
tanzu	www.tanzu.vmware.com/security/cve-2021-22060
oracle	www.oracle.com/security-alerts/cpuapr2022.html
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2022060324
auscert	www.auscert.org.au/bulletins/ESB-2022.4174
vigilance	www.vigilance.fr/vulnerability/Spring-Framework-write-access-via-Log-Injection-37179
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2022060716
packetstormsecurity	www.packetstormsecurity.com/files/167841/Red-Hat-Security-Advisory-2022-5532-01.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-22060

23 May 2026 00:00Current

8.4High risk

Vulners AI Score8.4

CVSS 24

CVSS 3.14.3

EPSS0.00176

Vmware Spring Framework security flaw log injection data modification access controls