io.jstach:jstachio-jmustache (0.10.0), io.jstach:jstachio-spring (0.10.0) +4 more potentially affected by CVE-2023-33962 via io.jstach:jstachio (0.10.0)

io.jstach:jstachio MAVEN version 0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.jstach:jstachio and may be impacted: - io.jstach:jstachio-jmustache 0.10.0 - io.jstach:jstachio-spring 0.10.0 - io.jstach:jstachio-spring-example 0.10.0 -...

dk.mada.jaxrs:openapi-jaxrs-client (0.9.17), io.jstach:jstachio-jmustache (0.10.1) +5 more potentially affected by CVE-2023-33962 via io.jstach:jstachio (0.10.1)

io.jstach:jstachio MAVEN version 0.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.jstach:jstachio and may be impacted: - dk.mada.jaxrs:openapi-jaxrs-client 0.9.17 - io.jstach:jstachio-jmustache 0.10.1 - io.jstach:jstachio-spring 0.10.1 -...

io.jstach:jstachio-jmustache (0.11.0), io.jstach:jstachio-spring (0.11.0) +4 more potentially affected by CVE-2023-33962 via io.jstach:jstachio (0.11.0)

io.jstach:jstachio MAVEN version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.jstach:jstachio and may be impacted: - io.jstach:jstachio-jmustache 0.11.0 - io.jstach:jstachio-spring 0.11.0 - io.jstach:jstachio-spring-example 0.11.0 -...

io.jstach:jstachio-jmustache (0.14.0), io.jstach:jstachio-spring (0.14.0) +4 more potentially affected by CVE-2023-33962 via io.jstach:jstachio (0.14.0)

io.jstach:jstachio MAVEN version 0.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.jstach:jstachio and may be impacted: - io.jstach:jstachio-jmustache 0.14.0 - io.jstach:jstachio-spring 0.14.0 - io.jstach:jstachio-spring-example 0.14.0 -...

io.jstach:jstachio-jmustache (0.15.0), io.jstach:jstachio-spring (0.15.0) +4 more potentially affected by CVE-2023-33962 via io.jstach:jstachio (0.15.0)

io.jstach:jstachio MAVEN version 0.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.jstach:jstachio and may be impacted: - io.jstach:jstachio-jmustache 0.15.0 - io.jstach:jstachio-spring 0.15.0 - io.jstach:jstachio-spring-example 0.15.0 -...

io.jooby:jooby-jstachio (3.0.0.m9), io.jstach:jstachio-jmustache (0.17.0) +5 more potentially affected by CVE-2023-33962 via io.jstach:jstachio (0.17.0)

io.jstach:jstachio MAVEN version 0.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.jstach:jstachio and may be impacted: - io.jooby:jooby-jstachio 3.0.0.m9 - io.jstach:jstachio-jmustache 0.17.0 - io.jstach:jstachio-spring 0.17.0 -...

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is affected but not classified as vulnerable by a remote code execution in Spring Framework (CVE-2022-22965)

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is affected but not classified as vulnerable to a remote code execution in Spring Framework CVE-2022-22965 as it does not meet all of the following criteria: 1. JDK 9 or higher, 2. Apache Tomcat as the Servlet container, 3...

CVE-2022-31684: Reactor Netty HTTP Server may log request headers

The Reactor Netty 1.0.24 release on October 11 included fix for CVE-2022-31684 affecting Reactor Netty HTTP Server. Users are encouraged to update as soon as possible. Reactor Netty is used internally in many frameworks including Spring WebFlux and its WebClient. If you have a Spring Boot...

Security Bulletin: IBM Case Manager is affected but not classified as vulnerable to a remote code execution in Spring Framework [CVE-2022-22965]

Summary IBM Case Manager is affected but not classified as vulnerable to a remote code execution in Spring Framework CVE-2022-22965. To be vulnerable a product must meet all of the following criterias: 1. JDK 9 or higher, 2. Apache Tomcat as the Servlet container, 3. Packaged as WAR in contrast t...

Security Bulletin: IBM Sterling B2B Integrator is affected by a remote code execution in Spring Framework (CVE-2022-22965)

Summary IBM Sterling B2B Integrator is affected but not classified as vulnerable to a remote code execution in Spring Framework CVE-2022-22965 as it does not meet all of the following criteria: 1. JDK 9 or higher, 2. Apache Tomcat as the Servlet container, 3. Packaged as WAR in contrast to a Spri...

Security Bulletin: IBM Spectrum Symphony is affected but not classified as vulnerable by a remote code execution in Spring Framework (CVE-2022-22965)

Summary IBM Spectrum Symphony is affected but not classified as vulnerable to a remote code execution in Spring Framework CVE-2022-22965 as it does not meet all of the following criteria: 1. JDK 9 or higher, 2. Apache Tomcat as the Servlet container, 3. Packaged as WAR in contrast to a Spring Boo...

Dell Wyse Management Suite < 3.6.1 Multiple Vulnerabilities (DSA-2022-098)

The version of Dell Wyse Management Suite installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the DSA-2022-098 advisory. - The BNmodsqrt function, which computes a modular square root, contains a bug that can cause it to...

Security Bulletin: HMC is affected but not classified as vulnerable by a remote code execution in Spring Framework (CVE-2022-22965)

Summary HMC is affected but not classified as vulnerable to a remote code execution in Spring Framework CVE-2022-22965 as it does not meet all of the following criteria: 1. JDK 9 or higher, 2. Apache Tomcat as the Servlet container, 3. Packaged as WAR in contrast to a Spring Boot executable jar, ...

Security Bulletin: IBM Security SOAR is affected but not classified as vulnerable to remote code execution in Spring Framework (CVE-2022-22965)

Summary IBM Security SOAR is affected but not classified as vulnerable to a remote code execution in Spring Framework CVE-2022-22965 as it does not meet all of the following criteria: 1. JDK 9 or higher, 2. Apache Tomcat as the Servlet container, 3. Packaged as WAR in contrast to a Spring Boot...

Security Bulletin:IBM Common Licensing is affected but not classified as vulnerable by a remote code execution in Spring Framework (220575,CVE-2022-22965)

Summary IBM Common Licensing is affected but not classified as vulnerable to a remote code execution in Spring Framework 220575, CVE-2022-22965 as it does not meet all of the following criteria: 1. JDK 9 or higher, 2. Apache Tomcat as the Servlet container, 3. Packaged as WAR in contrast to a...

Security Bulletin: IBM Sterling Control Center is affected but not classified as vulnerable by a remote code execution in Spring Framework (CVE-2022-22965)

Summary IBM Sterling Control Center is affected but not classified as vulnerable to a remote code execution in Spring Framework CVE-2022-22965 as it does not meet all of the following criteria: 1. JDK 9 or higher, 2. Apache Tomcat as the Servlet container, 3. Packaged as WAR in contrast to a Spri...

org.springframework:spring-webflux (5.3.38), org.springframework:spring-webmvc (5.3.38) +1 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (5.3.38)

org.springframework:spring-web MAVEN version 5.3.38 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-webflux 5.3.38 - org.springframework:spring-webmvc 5.3.38 -...

org.jboss.resteasy:resteasy-spring (>=3.9.0.final, <=4.3.1.final), org.jboss.resteasy:resteasy-spring-web (>=4.2.0.final, <=4.7.10.final) +4 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (5.0.14.release)

org.springframework:spring-web MAVEN version 5.0.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.jboss.resteasy:resteasy-spring =3.9.0.final, =4.2.0.final, =4.2.0.final, =4.3.1.final ...

org.springframework.security:spring-security-cas (5.0.18.release), org.springframework.security:spring-security-oauth2-client (5.0.18.release) +8 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (5.0.18.release)

org.springframework:spring-web MAVEN version 5.0.18.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework.security:spring-security-cas 5.0.18.release -...

com.languageweaver.sdk:auth (>=1.5, <=2.2), com.mercateo.rest:rest-schemagen-spring (0.3.0) +5 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (5.0.20.release)

org.springframework:spring-web MAVEN version 5.0.20.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.languageweaver.sdk:auth =1.5, =1.0.6, =1.0.7 - org.springframework:spring-webflux...