CVE-2022-22976

🗓️ 19 May 2022 14:50:46Reported by vmwareType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 218 Views

Spring Security version integer overflow vulnerabilit

Reporter	Title	Published	Views	Family All 37
IBM Security Bulletins	Security Bulletin: Vulnerability in Spring Security affects IBM Process Mining . Multiple CVEs	27 Jun 202311:01	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities Spring Boot, Spring Security and Spring Framework might affect IBM Storage Copy Data Management	22 Mar 202416:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected but not classified as vulnerable to multiple vulnerabilities in Spring Security	17 May 202319:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities including remote code execution in Apache Log4j 1.x	3 Aug 202216:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2023	1 Sep 202319:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i Modernization Engine for Lifecycle Integration is vulnerable to multiple vulnerabilities	11 Jul 202216:00	–	ibm
ATTACKERKB	CVE-2022-22976	19 May 202215:15	–	attackerkb
Circl	CVE-2022-22976	19 May 202218:29	–	circl
CNNVD	Spring Framework 输入验证错误漏洞	17 May 202200:00	–	cnnvd
Cvelist	CVE-2022-22976	19 May 202214:50	–	cvelist

NVD

Node

vmware spring_securityRange5.2.1–5.5.7

vmware spring_securityRange5.6.0–5.6.4

vmware spring_securityMatch5.2.0-

Node

oracle financial_services_crime_and_compliance_management_studioMatch8.0.8.2.0

oracle financial_services_crime_and_compliance_management_studioMatch8.0.8.3.0

Node

netapp active_iq_unified_managerMatch-linux

netapp active_iq_unified_managerMatch-vmware_vsphere

netapp active_iq_unified_managerMatch-windows

[
  {
    "product": "Spring Security",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Spring Security versions 5.5.x prior to 5.5.7, 5.6.x prior to 5.6.4, and earlier unsupported versions"
      }
    ]
  }
]

Source	Link
security	www.security.netapp.com/advisory/ntap-20220707-0003/
tanzu	www.tanzu.vmware.com/security/cve-2022-22976
oracle	www.oracle.com/security-alerts/cpujul2022.html

17 Jun 2026 04:29Current

5.5Medium risk

Vulners AI Score5.5

CVSS 24.3

CVSS 3.15.3

EPSS0.02139

CWE-190