Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2010-1622
HistoryJun 21, 2010 - 4:30 p.m.

CVE-2010-1622

2010-06-2116:30:01
CWE-94
[email protected]
web.nvd.nist.gov
7

CVSS2

6

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

AI Score

9.7

Confidence

High

EPSS

0.028

Percentile

90.8%

JSON

SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote attackers to execute arbitrary code via an HTTP request containing class.classLoader.URLs[0]=jar: followed by a URL of a crafted .jar file.

Affected configurations

Nvd
Node
oraclefusion_middlewareMatch7.6.2
OR
oraclefusion_middlewareMatch11.1.1.6.1
OR
oraclefusion_middlewareMatch11.1.1.8.0
Node
springsourcespring_frameworkMatch2.5.0
OR
springsourcespring_frameworkMatch2.5.1
OR
springsourcespring_frameworkMatch2.5.2
OR
springsourcespring_frameworkMatch2.5.3
OR
springsourcespring_frameworkMatch2.5.4
OR
springsourcespring_frameworkMatch2.5.5
OR
springsourcespring_frameworkMatch2.5.6
OR
springsourcespring_frameworkMatch2.5.7
OR
springsourcespring_frameworkMatch3.0.0
OR
springsourcespring_frameworkMatch3.0.1
OR
springsourcespring_frameworkMatch3.0.2
VendorProductVersionCPE
oraclefusion_middleware7.6.2cpe:2.3:a:oracle:fusion_middleware:7.6.2:*:*:*:*:*:*:*
oraclefusion_middleware11.1.1.6.1cpe:2.3:a:oracle:fusion_middleware:11.1.1.6.1:*:*:*:*:*:*:*
oraclefusion_middleware11.1.1.8.0cpe:2.3:a:oracle:fusion_middleware:11.1.1.8.0:*:*:*:*:*:*:*
springsourcespring_framework2.5.0cpe:2.3:a:springsource:spring_framework:2.5.0:*:*:*:*:*:*:*
springsourcespring_framework2.5.1cpe:2.3:a:springsource:spring_framework:2.5.1:*:*:*:*:*:*:*
springsourcespring_framework2.5.2cpe:2.3:a:springsource:spring_framework:2.5.2:*:*:*:*:*:*:*
springsourcespring_framework2.5.3cpe:2.3:a:springsource:spring_framework:2.5.3:*:*:*:*:*:*:*
springsourcespring_framework2.5.4cpe:2.3:a:springsource:spring_framework:2.5.4:*:*:*:*:*:*:*
springsourcespring_framework2.5.5cpe:2.3:a:springsource:spring_framework:2.5.5:*:*:*:*:*:*:*
springsourcespring_framework2.5.6cpe:2.3:a:springsource:spring_framework:2.5.6:*:*:*:*:*:*:*
Rows per page:
1-10 of 141

Related

exploitdb 1
exploitpack 1
checkpoint_advisories 1
cvelist 1
github 1
prion 1
securityvulns 3
cve 1
seebug 2
osv 1
githubexploit 7
nessus 1
thn 1
cisa 1
avleonov 1
securelist 1
mmpc 1
mssecure 1
trellix 2
checkpoint_security 1
ibm 3
oracle 1
exploitdb
exploitdb
Spring Framework - Arbitrary code Execution
2010-06-18 00:00:00
exploitpack
exploitpack
Spring Framework - Arbitrary code Execution
2010-06-18 00:00:00
checkpoint_advisories
checkpoint_advisories
VMware SpringSource Spring Framework class.classloader Remote Code Execution (CVE-2010-1622)
2011-06-07 00:00:00
cvelist
cvelist
CVE-2010-1622
2010-06-21 16:00:00
github
github
Improper Control of Generation of Code ('Code Injection') in Spring Framework
2022-05-17 03:28:34
prion
prion
Code injection
2010-06-21 16:30:00
securityvulns
securityvulns
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2010-06-20 00:00:00
CVE-2010-1622: Spring Framework execution of arbitrary code
2010-06-20 00:00:00
Oracle / Sun / PeopleSoft / MySQL multiple security vulnerabilities
2015-11-02 00:00:00
cve
cve
CVE-2010-1622
2010-06-21 16:30:01
seebug
seebug
Spring Framework arbitrary code execution
2014-07-01 00:00:00
Spring Framework class.classLoaderη±»θΏœη¨‹δ»£η ζ‰§θ‘ŒζΌζ΄ž
2010-06-21 00:00:00
osv
osv
Improper Control of Generation of Code ('Code Injection') in Spring Framework
2022-05-17 03:28:34
githubexploit
githubexploit
Exploit for Code Injection in Oracle Fusion Middleware
2022-03-31 08:06:46
Exploit for Code Injection in Vmware Spring Framework
2022-05-19 23:16:40
Exploit for Code Injection in Vmware Spring Framework
2022-04-29 09:58:05
nessus
nessus
Oracle WebCenter Sites Multiple Vulnerabilities (October 2015 CPU)
2015-10-23 00:00:00
thn
thn
Unpatched Java Spring Framework 0-Day RCE Bug Threatens Enterprise Web Apps Security
2022-03-31 05:52:00
cisa
cisa
Spring Releases Security Updates Addressing "Spring4Shell" and Spring Cloud Function Vulnerabilities
2022-04-01 00:00:00
avleonov
avleonov
Spring4Shell, Spring Cloud Function RCE and Spring Cloud Gateway Code Injection
2022-04-03 00:15:45
securelist
securelist
Spring4Shell (CVE-2022-22965): details and mitigations
2022-04-04 15:30:36
mmpc
mmpc
SpringShell RCE vulnerability: Guidance for protecting against and detecting CVE-2022-22965
2022-04-05 01:11:24
mssecure
mssecure
SpringShell RCE vulnerability: Guidance for protecting against and detecting CVE-2022-22965
2022-04-05 01:11:24
trellix
trellix
The Bug Report – April 2022 Edition
2022-05-04 00:00:00
The Bug Report – April 2022 Edition
2022-05-04 00:00:00
checkpoint_security
checkpoint_security
Check Point Response to Spring Vulnerabilities CVE-2022-22963, CVE-2022-22946, CVE-2022-22947, CVE-2022-22965 (Spring4Shell) and CVE-2022-22950
2022-03-30 21:41:02
ibm
ibm
Security Bulletin: IBM Security Directory Integrator is affected by multiple security vulnerabilities
2023-06-22 16:30:54
Security Bulletin: IBM Security Directory Suite is vulnerable to multiple issues
2023-06-06 18:05:17
Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to multiple security vulnerabilities
2019-02-18 14:10:01
oracle
oracle
Oracle Critical Patch Update Advisory - October 2015
2015-10-20 00:00:00

CVSS2

6

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

AI Score

9.7

Confidence

High

EPSS

0.028

Percentile

90.8%

JSON
Related for NVD:CVE-2010-1622
exploitdb1exploitpack1checkpoint_advisories1cvelist1github1prion1securityvulns3cve1seebug2osv1githubexploit7nessus1thn1cisa1avleonov1securelist1mmpc1mssecure1trellix2checkpoint_security1ibm3oracle1