logo
DATABASE RESOURCES PRICING ABOUT US

CVE-2022-22963

Description

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.


Affected Software


CPE Name Name Version
vmware:spring_cloud_function vmware spring cloud function 3.2.2
vmware:spring_cloud_function vmware spring cloud function 3.1.6
oracle:sd-wan_edge oracle sd-wan edge 9.0
oracle:retail_xstore_point_of_service oracle retail xstore point of service 20.0.1
oracle:communications_cloud_native_core_security_edge_protection_proxy oracle communications cloud native core security edge protection proxy 1.7.0
oracle:banking_cash_management oracle banking cash management 14.5
oracle:banking_trade_finance_process_management oracle banking trade finance process management 14.5
oracle:banking_credit_facilities_process_management oracle banking credit facilities process management 14.5
oracle:banking_corporate_lending_process_management oracle banking corporate lending process management 14.5
oracle:banking_supply_chain_finance oracle banking supply chain finance 14.5
oracle:sd-wan_edge oracle sd-wan edge 9.1
oracle:banking_liquidity_management oracle banking liquidity management 14.5
oracle:banking_liquidity_management oracle banking liquidity management 14.2
oracle:banking_virtual_account_management oracle banking virtual account management 14.5
oracle:financial_services_enterprise_case_management oracle financial services enterprise case management 8.1.1.0
oracle:financial_services_enterprise_case_management oracle financial services enterprise case management 8.1.1.1
oracle:financial_services_behavior_detection_platform oracle financial services behavior detection platform 8.1.2.0
oracle:financial_services_behavior_detection_platform oracle financial services behavior detection platform 8.1.1.1
oracle:financial_services_behavior_detection_platform oracle financial services behavior detection platform 8.1.1.0
oracle:mysql_enterprise_monitor oracle mysql enterprise monitor 8.0.29
oracle:communications_cloud_native_core_console oracle communications cloud native core console 1.9.0
oracle:communications_cloud_native_core_policy oracle communications cloud native core policy 1.15.0
oracle:communications_communications_policy_management oracle communications communications policy management 12.6.0.0.0
oracle:communications_cloud_native_core_unified_data_repository oracle communications cloud native core unified data repository 1.15.0
oracle:communications_cloud_native_core_unified_data_repository oracle communications cloud native core unified data repository 22.1.0
oracle:communications_cloud_native_core_security_edge_protection_proxy oracle communications cloud native core security edge protection proxy 22.1.0
oracle:communications_cloud_native_core_policy oracle communications cloud native core policy 22.1.0
oracle:communications_cloud_native_core_network_slice_selection_function oracle communications cloud native core network slice selection function 1.8.0
oracle:communications_cloud_native_core_network_slice_selection_function oracle communications cloud native core network slice selection function 22.1.0
oracle:communications_cloud_native_core_network_repository_function oracle communications cloud native core network repository function 1.15.0
oracle:communications_cloud_native_core_network_repository_function oracle communications cloud native core network repository function 22.1.0
oracle:communications_cloud_native_core_network_function_cloud_native_environment oracle communications cloud native core network function cloud native environment 22.1.0
oracle:communications_cloud_native_core_network_function_cloud_native_environment oracle communications cloud native core network function cloud native environment 1.10.0
oracle:communications_cloud_native_core_network_exposure_function oracle communications cloud native core network exposure function 22.1.0
oracle:communications_cloud_native_core_console oracle communications cloud native core console 22.1.0
oracle:communications_cloud_native_core_automated_test_suite oracle communications cloud native core automated test suite 22.1.0
oracle:communications_cloud_native_core_automated_test_suite oracle communications cloud native core automated test suite 1.9.0
oracle:product_lifecycle_analytics oracle product lifecycle analytics 3.6.1.0
oracle:retail_xstore_point_of_service oracle retail xstore point of service 21.0.0
oracle:financial_services_enterprise_case_management oracle financial services enterprise case management 8.1.2.0
oracle:financial_services_analytical_applications_infrastructure oracle financial services analytical applications infrastructure 8.1.2.0
oracle:financial_services_analytical_applications_infrastructure oracle financial services analytical applications infrastructure 8.1.1.0
oracle:banking_origination oracle banking origination 14.5
oracle:banking_electronic_data_exchange_for_corporates oracle banking electronic data exchange for corporates 14.5
oracle:banking_branch oracle banking branch 14.5
oracle:communications_cloud_native_core_policy oracle communications cloud native core policy 22.1.3
oracle:communications_cloud_native_core_network_function_cloud_native_environment oracle communications cloud native core network function cloud native environment 22.1.2

Related