EUVD-2022-0479

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Malicious input in Spring Framework versions can cause log entry insertion vulnerability follow-up.

Reporter	Title	Published	Views	Family All 34
IBM Security Bulletins	Security Bulletin: IBM MaaS360 Cloud Extender Agent, Mobile Enterprise Gateway and VPN module have multiple vulnerabilities (CVE-2021-22060, CVE-2022-22950, CVE-2022-0547, CVE-2022-0778, CVE-2022-22965)	6 Jun 202218:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Controller has addressed multiple vulnerabilities	2 Dec 202219:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilites in IBM Rational Build Forge.	2 Mar 202608:30	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities Spring Boot, Spring Security and Spring Framework might affect IBM Storage Copy Data Management	22 Mar 202416:06	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Spring Framework affects IBM Tivoli Application Dependency Discovery Manager (CVE-2022-22950, CVE-2021-22096, CVE-2022-22968, CVE-2021-22060).	12 May 202218:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling B2B Integrator vulnerable to security bypass due to Spring Framework (CVE-2021-22060)	17 Oct 202212:56	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Spring Core affect watsonx.data	10 Feb 202510:33	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in [All] Spring Framework - CVE-2021-22060 (Publicly disclosed vulnerability) impacts IBM Watson Machine Learning Accelerator	23 Mar 202202:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Spring	30 Mar 202215:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities including a remote code execution in Spring Framework (CVE-2022-22965)	11 Apr 202215:17	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "b04c64f7-519f-3839-845b-5329f25cf8e7",
        "vendor": {
          "name": "n/a"
        }
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-22060
tanzu	www.tanzu.vmware.com/security/cve-2021-22060
oracle	www.oracle.com/security-alerts/cpuapr2022.html
access	www.access.redhat.com/errata/RHSA-2022:5532

03 Oct 2025 20:07Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.14.3

CVSS 24

EPSS0.00176