CVE-2022-22963

CVE-2022-22963 affects Spring Cloud Function: in versions 3.1.6, 3.2.2 and older unsupported releases, routing-expression using SpEL can be crafted by a user to trigger remote code execution and access local resources. The root cause is unsafe evaluation of SpEL within the HTTP request routing he...

CVE-2026-61220

CVE-2026-61220 affects Oracle Banking Origination (Configuration) in Oracle Financial Services Applications, vulnerable in version 14.5.0.16.0. The flaw allows unauthenticated, network-accessible compromise via HTTP with user interaction required, potentially enabling unauthorized update/insert/d...