Lucene search

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data is affected by a remote code execution in Spring Framework (CVE-2022-22965)

🗓️ 27 Apr 2022 14:28:54Reported by IBMType

ibm🔗 www.ibm.com👁 105 Views

IBM Watson Discovery affected by Spring Framework remote code execution (CVE-2022-22965). Upgrades available

Reporter	Title	Published	Views	Family All 199
F5 Networks	K11510688 : Spring Framework (Spring4Shell) and Spring Cloud vulnerabilities CVE-2022-22965, CVE-2022-22950, and CVE-2022-22963	31 Mar 202200:00	–	f5
CERT	Spring Framework insecurely handles PropertyDescriptor objects with data binding	31 Mar 202200:00	–	cert
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is affected by a remote code execution in Spring Framework (CVE-2022-22963, CVE-2022-22965, CVE-2022-22950)	24 Jun 202217:34	–	ibm
IBM Security Bulletins	Security Bulletin: CMIS is affected since it uses Spring Framework, but not vulnerable to [CVE-2022-22965] and [CVE-2022-22963]	18 Oct 202215:36	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of Spring Framework, IBM Db2 Web Query for i is vulnerable to unprotected fields (CVE-2022-22968), remote code execution (CVE-2022-22965), and denial of service (CVE-2022-22950).	10 Jun 202205:17	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability exists for Spring Framework in Watson Explorer (CVE-2021-22060, CVE-2022-22965, CVE-2022-22950)	22 Apr 202211:43	–	ibm
IBM Security Bulletins	Security Bulletin: A VMWare Tanzu Spring Vulerability Affects IBM OpenPages with Watson (CVE-2022-22950)	28 Jul 202316:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service, caused by improper input validation with Spring Framework (CVE-2022-22950).	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected by multiple vulnerabilities (CVE-2022-22950, XFID:217968)	13 May 202217:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Spring Framework affect SPSS Collaboration and Deployment Services	30 May 202214:20	–	ibm

Vulners

Node

ibm watson_queryMatch4.0.0

ibm watson_queryMatch4.0.7

ibm watson_queryMatch2.0.0

ibm watson_queryMatch2.2.1

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Apr 2022 14:54Current

1.2Low risk

Vulners AI Score1.2

EPSS0.975