CVE-2025-22233

🗓️ 16 May 2025 20:15:22Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 33 Views

CVE-2025-22233 allows bypass of disallowedFields checks in certain Spring Framework versions.

Reporter	Title	Published	Views	Family All 73
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Spring may affect IBM Business Automation Workflow - CVE-2024-38820, CVE-2025-22233	8 Oct 202515:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Content Navigator consumes vulnerable spring framework library	23 Oct 202511:13	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in Spring Framework Affect IBM Sterling B2B Integrator and IBM Sterling File Gateway	12 Jun 202618:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses multiple third party dependencies which is vulnerable to CVEs.	7 Oct 202507:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 2.0.2	21 Jun 202513:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct Web Services vulnerable to spring-context-6.2.3.jar (CVE-2025-22233)	24 Jun 202516:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i Modernization Engine for Lifecycle Integration is affected by multiple vulnerabilities	19 Jun 202514:46	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps	30 Jul 202517:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions.	30 Jun 202523:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Content Navigator consumes vulnerable spring framework library	23 Oct 202515:54	–	ibm

Source	Link
nvd	www.nvd.nist.gov/vuln-metrics/cvss/v3-calculator

15 Apr 2026 00:35Current

CVSS 3.13.1

EPSS0.00083

cve-2025-22233 disallowed fields spring framework version upgrade mitigation steps model design data binding.