5906 matches found
cn.springcloud.gray:spring-cloud-gray-plugin-event-stream (>=a.1.1.1, <=a.2.0.0), cn.springcloud.gray:spring-cloud-gray-server-plugin-event-stream (>=a.1.1.1, <=a.2.0.0) +97 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.3.25.release)
org.springframework:spring-messaging MAVEN version 4.3.25.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - cn.springcloud.gray:spring-cloud-gray-plugin-event-stream =a.1.1.1, =a.1.1.1,...
cn.home1:oss-configserver (>=1.0.6.oss, <=1.0.7.oss), cn.home1:oss-turbine (>=1.0.6.oss, <=1.0.7.oss) +479 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.3.3.release)
org.springframework:spring-messaging MAVEN version 4.3.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - cn.home1:oss-configserver =1.0.6.oss, =1.0.6.oss, =1.1.14-release,...
ca.jeb:common-java (2014.10.01), ca.jeb:protobuf-serializer (2014.10.01) +69 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.0.7.release)
org.springframework:spring-messaging MAVEN version 4.0.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - ca.jeb:common-java 2014.10.01 - ca.jeb:protobuf-serializer 2014.10.01 -...
com.bq.oss.corbel:event-bus (1.19.2), com.bq.oss.corbel:events (1.19.2) +78 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.1.2.release)
org.springframework:spring-messaging MAVEN version 4.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - com.bq.oss.corbel:event-bus 1.19.2 - com.bq.oss.corbel:events 1.19.2 -...
at.researchstudio.sat:won-core (>=0.4, <=0.9), at.researchstudio.sat:won-cryptography (>=0.4, <=0.6) +444 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.3.18.release)
org.springframework:spring-messaging MAVEN version 4.3.18.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - at.researchstudio.sat:won-core =0.4, =0.4, =0.4, =0.4, =0.4, =0.4, =0.4, =0.4,...
com.kurento.kmf:kmf-broker (4.3.1), net.gplatform:sudoor-server-lib (>=1.0.4, <=1.0.12) +49 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.0.6.release)
org.springframework:spring-messaging MAVEN version 4.0.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - com.kurento.kmf:kmf-broker 4.3.1 - net.gplatform:sudoor-server-lib =1.0.4,...
ai.superstream:spring-kafka (>=2.8.4-alpha1, <=2.8.4-alpha6), biz.eyebeam.mssc:mssc-public-bom (>=1.0.1, <=1.0.5) +2369 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (>=5.3.0, <=5.3.19)
org.springframework:spring-messaging MAVEN version =5.3.0, =2.8.4-alpha1, =1.0.1, =1.0.3, =0.0.1-alpha, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =5.6.5, =5.6.5, =5.3.0, =5.6.5, =5.3.0, =5.3.0, =6.0.5 and more Source cves: CVE-2022-22971 Source advisory: OSV:GHSA-RQPH-VQWM-22VC...
ch.rasc:wampspring (1.1.0), ch.rasc:wampspring-session (1.1.0) +51 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.1.4.release)
org.springframework:spring-messaging MAVEN version 4.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - ch.rasc:wampspring 1.1.0 - ch.rasc:wampspring-session 1.1.0 -...
ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (3.0.0), com.consol.citrus:citrus-simulator-starter (1.0.0) +298 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.3.10.release)
org.springframework:spring-messaging MAVEN version 4.3.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base 3.0.0 -...
org.apache.cxf.systests:cxf-systests-uncategorized (3.2.14), org.apache.servicemix.bundles:org.apache.servicemix.bundles.spring-jms (4.3.27.release_1) +5 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.3.27.release)
org.springframework:spring-messaging MAVEN version 4.3.27.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - org.apache.cxf.systests:cxf-systests-uncategorized 3.2.14 -...
io.oasp.java.modules:oasp4j-batch (>=1.5.0, <=2.6.1), org.springframework.batch:spring-batch-integration (>=3.0.0.release, <=3.0.8.release) +29 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.0.5.release)
org.springframework:spring-messaging MAVEN version 4.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - io.oasp.java.modules:oasp4j-batch =1.5.0, =3.0.0.release, =1.1.0.release,...
io.bitsensor:lib-util (4.11.0), io.zipkin.brave:brave-instrumentation-spring-rabbit (>=5.6.4, <=5.7.0) +70 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.3.23.release)
org.springframework:spring-messaging MAVEN version 4.3.23.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - io.bitsensor:lib-util 4.11.0 -...
org.projectreactor.spring:reactor-spring-messaging (>=1.1.0.release, <=1.1.3.release), org.springframework.integration:spring-integration-amqp (4.0.0.release) +26 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.0.3.release)
org.springframework:spring-messaging MAVEN version 4.0.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - org.projectreactor.spring:reactor-spring-messaging =1.1.0.release, =1.1.3.relea...
com.ahome-it:ahome-tooling-server-core (>=1.1.19-release, <=1.1.26-release), com.ahome-it:ahome-tooling-server-hazelcast (>=1.1.23-release, <=1.1.25-release) +209 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.3.4.release)
org.springframework:spring-messaging MAVEN version 4.3.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - com.ahome-it:ahome-tooling-server-core =1.1.19-release, =1.1.23-release,...
org.springframework.batch:spring-batch-integration (3.0.9.release), org.springframework.boot:spring-boot-starter-integration (>=1.1.11.release, <=1.1.12.release) +27 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.0.9.release)
org.springframework:spring-messaging MAVEN version 4.0.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - org.springframework.batch:spring-batch-integration 3.0.9.release -...
org.apache.servicemix.bundles:org.apache.servicemix.bundles.spring-jms (>=4.1.0.release_1, <=4.1.0.release_5), org.jiucai:appframework (2.0.0) +2 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.1.0.release)
org.springframework:spring-messaging MAVEN version 4.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - org.apache.servicemix.bundles:org.apache.servicemix.bundles.spring-jms...
IBM MQ for HPE NonStop 信息泄露漏洞
IBM MQ IBM WebSphere MQ is a messaging middleware product from IBM. The product is mainly for the service-oriented architecture SOA to provide a reliable and proven messaging backbone. An information disclosure vulnerability exists in IBM MQ for HPE NonStop version 8.1.0, which can be exploited b...
ai.superstream:spring-kafka (>=2.8.4-alpha1, <=2.8.4-alpha6), biz.eyebeam.mssc:mssc-public-bom (>=1.0.1, <=1.0.5) +2369 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (>=5.3.0, <=5.3.19)
org.springframework:spring-messaging MAVEN version =5.3.0, =2.8.4-alpha1, =1.0.1, =1.0.3, =0.0.1-alpha, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =5.6.5, =5.6.5, =5.3.0, =5.6.5, =5.3.0, =5.3.0, =6.0.5 and more Source cves: CVE-2022-22971 Source advisory: MEND:CVE-2022-22971...
Vulnerabilities fixed in IBM MQ
IBM has fixed multiple vulnerabilities in supporting software supplied with IBM MQ. The vulnerabilities are in Java, Eclipse Jetty and Websphere Liberty and were previously fixed in the individual products. A malicious party could potentially exploit the vulnerabilities to cause a...
