Lucene search

CVE-2021-22118

🗓️ 27 May 2021 15:07:15Reported by vmwareType

cve🔗 web.nvd.nist.gov📰️ 9 Media mentions👁 148 Views

Spring Framework versions 5.2.x prior to 5.2.15 and 5.3.x prior to 5.3.7 allow local privilege escalation

Reporter	Title	Published	Views	Family All 26
Prion	Privilege escalation	27 May 202115:15	–	prion
OSV	Improper Privilege Management in Spring Framework	24 May 202219:03	–	osv
OSV	CVE-2021-22118	27 May 202115:15	–	osv
NVD	CVE-2021-22118	27 May 202115:15	–	nvd
Cvelist	CVE-2021-22118	27 May 202114:48	–	cvelist
IBM Security Bulletins	Security Bulletin: A vulnerability in Spring Framework affects IBM Watson Machine Learning Accelerator	18 Oct 202106:30	–	ibm
IBM Security Bulletins	Security Bulletin: A Privilege Escalation vulnerability in Pivotal Spring Framework affects IBM LKS Administration & Reporting Tool and its Agent	3 Sep 202105:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Risk Manager on CP4S is affected by multiple vulnerabilities	18 Oct 202114:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	11 Oct 202118:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities including a remote code execution in Spring Framework (CVE-2022-22965)	11 Apr 202215:17	–	ibm

Nvd

Node

vmware spring_frameworkRange5.2.0–5.2.15

vmware spring_frameworkRange5.3.0–5.3.7

Node

oracle commerce_guided_searchMatch11.3.2

oracle communications_brm_-_elastic_charging_engineMatch12.0.0.3

oracle communications_cloud_native_core_binding_support_functionMatch1.9.0

oracle communications_cloud_native_core_policyMatch1.14.0

oracle communications_cloud_native_core_security_edge_protection_proxyMatch1.6.0

oracle communications_cloud_native_core_service_communication_proxyMatch1.14.0

oracle communications_cloud_native_core_unified_data_repositoryMatch1.14.0

oracle communications_diameter_intelligence_hubRange8.0.0–8.1.0

oracle communications_diameter_intelligence_hubRange8.2.0–8.2.3

oracle communications_element_managerRange8.2.0–8.2.4.0

oracle communications_interactive_session_recorderMatch6.4

oracle communications_network_integrityMatch7.3.6

oracle communications_session_report_managerRange8.0.0–8.2.4.0

oracle communications_session_route_managerRange8.0.0–8.2.4.0

oracle communications_unified_inventory_managementMatch7.4.1

oracle communications_unified_inventory_managementMatch7.4.2

oracle communications_unified_inventory_managementMatch7.5.0

oracle documakerRange12.6.0–12.6.4

oracle enterprise_data_qualityMatch12.2.1.3.0

oracle enterprise_data_qualityMatch12.2.1.4.0

oracle financial_services_analytical_applications_infrastructureRange8.0.8–8.1.1

oracle healthcare_data_repositoryMatch8.1.0

oracle insurance_policy_administrationRange11.0–11.3.1

oracle insurance_rules_paletteMatch11.0.2

oracle insurance_rules_paletteMatch11.1.0

oracle insurance_rules_paletteMatch11.2.7

oracle insurance_rules_paletteMatch11.3.0

oracle insurance_rules_paletteMatch11.3.1

oracle mysql_enterprise_monitorRange≤8.0.25

oracle retail_assortment_planningMatch16.0

oracle retail_customer_management_and_segmentation_foundationRange16.0–19.0

oracle retail_financial_integrationMatch14.1.3.2

oracle retail_financial_integrationMatch15.0.3.1

oracle retail_financial_integrationMatch16.0.3

oracle retail_integration_busMatch14.1.3.2

oracle retail_integration_busMatch15.0.3.1

oracle retail_integration_busMatch16.0.3

oracle retail_merchandising_systemMatch19.0.1

oracle retail_order_brokerMatch16.0

oracle retail_predictive_application_serverMatch14.1.3

oracle retail_predictive_application_serverMatch15.0.3

oracle retail_predictive_application_serverMatch16.0.3

oracle utilities_testing_acceleratorMatch6.0.0.1.1

oracle utilities_testing_acceleratorMatch6.0.0.2.2

oracle utilities_testing_acceleratorMatch6.0.0.3.1

Node

netapp hciMatch-

netapp management_services_for_element_softwareMatch-

[
  {
    "product": "Spring Framework",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Spring Framework versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7"
      }
    ]
  }
]

Source	Link
oracle	www.oracle.com/security-alerts/cpuapr2022.html
oracle	www.oracle.com/security-alerts/cpuoct2021.html
tanzu	www.tanzu.vmware.com/security/cve-2021-22118
oracle	www.oracle.com/security-alerts/cpujan2022.html
security	www.security.netapp.com/advisory/ntap-20210713-0005/
oracle	www.oracle.com/security-alerts/cpujul2022.html
oracle	www.oracle.com//security-alerts/cpujul2021.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 May 2021 15:15Current

7.5High risk

Vulners AI Score7.5

CVSS24.6

CVSS37.8

EPSS0.0006