CVE-2022-22946

🗓️ 04 Mar 2022 15:50:06Reported by vmwareType

Insecure TrustManager in spring cloud gatewa

Reporter	Title	Published	Views	Family All 14
ATTACKERKB	CVE-2022-22946	4 Mar 202216:15	–	attackerkb
Circl	CVE-2022-22946	4 Mar 202218:27	–	circl
CNNVD	Vmware VMware Spring Cloud Gateway 信任管理问题漏洞	3 Mar 202200:00	–	cnnvd
CheckPoint Security	Check Point Response to Spring Vulnerabilities CVE-2022-22963, CVE-2022-22946, CVE-2022-22947, CVE-2022-22965 (Spring4Shell), CVE-2022-22950	31 Mar 202200:00	–	checkpoint_security
Cvelist	CVE-2022-22946	4 Mar 202215:50	–	cvelist
EUVD	EUVD-2022-28071	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Oracle Communications	20 Jul 202200:00	–	ncsc
NVD	CVE-2022-22946	4 Mar 202216:15	–	nvd
Oracle	Oracle Critical Patch Update Advisory - July 2022	19 Jul 202200:00	–	oracle
OSV	CVE-2022-22946	4 Mar 202216:15	–	osv

NVD

Node

vmware spring_cloud_gatewayMatch3.1.0

Node

oracle commerce_guided_searchMatch11.3.2

oracle communications_cloud_native_core_binding_support_functionMatch22.1.3

oracle communications_cloud_native_core_consoleMatch22.2.0

oracle communications_cloud_native_core_network_repository_functionMatch22.1.2

oracle communications_cloud_native_core_network_repository_functionMatch22.2.0

oracle communications_cloud_native_core_security_edge_protection_proxyMatch22.1.1

[
  {
    "product": "Spring Cloud Gateway",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Spring cloud gateway versions 3.1.x prior to 3.1.1+"
      }
    ]
  }
]

Source	Link
tanzu	www.tanzu.vmware.com/security/cve-2022-22946
oracle	www.oracle.com/security-alerts/cpujul2022.html

21 Nov 2024 06:47Current

5.7Medium risk

Vulners AI Score5.7

CVSS 22.1

CVSS 3.15.5

EPSS0.00725

CWE-295