EUVD-2022-5219

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Vulnerability in Spring framework allows denial of service attack via STOMP over WebSocket endpoint.

Reporter	Title	Published	Views	Family All 65
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight v1.6.8 addresses multiple security vulnerabilities.	11 Apr 202311:47	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Test Control Panel component in Rational Test Virtualization Server and Rational Test Workbench is vulnerable to a denial of service attack in Spring Framework (CVE-2022-22971)	16 Sep 202212:51	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities Spring Boot, Spring Security and Spring Framework might affect IBM Storage Copy Data Management	22 Mar 202416:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple VMWare Tanzu Spring Vulerabilities Affects IBM OpenPages with Watson (CVE-2022-22968, CVE-2022-22970, CVE-2022-22971)	28 Jul 202316:48	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Spring Framework affects IBM Watson Explorer (CVE-2022-22971, CVE-2022-22968, CVE-2022-22970)	17 Jun 202218:30	–	ibm
IBM Security Bulletins	Security Bulletin: Watson Machine Learning Accelerator is affected but not classified as vulnerable by a remote code execution in Spring Framework (CVE-2022-22971)	13 Jul 202202:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Common Licensing is vulnerable by a remote code attack in Spring Framework and Apache Commons(CVE-2022-22970,CVE-2022-22971,CVE-2022-33980)	25 Jul 202207:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities including remote code execution in Apache Log4j 1.x	3 Aug 202216:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is vulnerable to denial of service by authenticated user due to Spring Framework (CVE-2022-22971)	14 Sep 202222:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Spring Framework	29 Jun 202202:18	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "d8669065-de5a-3c34-bfcb-4815c6dd730e",
        "vendor": {
          "name": "n/a"
        }
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-22971
github	www.github.com/spring-projects/spring-framework/commit/159a99bbafdd6c01871228113d7042c3f83f360f
github	www.github.com/spring-projects/spring-framework/commit/dc2947c52df18d5e99cad03383f7d6ba13d031fd
github	www.github.com/spring-projects/spring-framework
security	www.security.netapp.com/advisory/ntap-20220616-0003
tanzu	www.tanzu.vmware.com/security/cve-2022-22971
oracle	www.oracle.com/security-alerts/cpujul2022.html
access	www.access.redhat.com/errata/RHSA-2022:5532
security	www.security.netapp.com/advisory/ntap-20220616-0003/

03 Oct 2025 20:07Current

7.8High risk

Vulners AI Score7.8

CVSS 3.16.5

CVSS 24

EPSS0.00247