Lucene search

Unpatched Java Spring Framework 0-Day RCE Bug Threatens Enterprise Web Apps Security

🗓️ 31 Mar 2022 05:00:52Reported by The Hacker NewsType

Unpatched Java Spring Framework 0-Day RCE Threatens Enterprise Web App

Reporter	Title	Published	Views	Family All 177
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is affected by a remote code execution in Spring Framework (CVE-2022-22963, CVE-2022-22965, CVE-2022-22950)	24 Jun 202217:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data is affected by a remote code execution in Spring Framework (CVE-2022-22965)	27 Apr 202214:54	–	ibm
IBM Security Bulletins	Security Bulletin: A VMWare Tanzu Spring Vulerability Affects IBM OpenPages with Watson (CVE-2022-22950)	28 Jul 202316:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected by multiple vulnerabilities (CVE-2022-22950, XFID:217968)	13 May 202217:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service, caused by improper input validation with Spring Framework (CVE-2022-22950).	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is affected but not classified as vulnerable to a denial of service in Spring Framework (CVE-2022-22950)	6 May 202223:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is affected but not classified as vulnerable to a denial of service in Spring Framework (CVE-2022-22950)	6 May 202223:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to improper input validation in Spring Framework (CVE-2022-22950)	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: [All] Spring Framework - CVE-2022-22950 (Publicly disclosed vulnerability)	6 Jun 202304:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Tivoli Monitoring is affected but not classified as vulnerable by a denial of service in Spring Framework (CVE-2022-22950)	30 Dec 202217:31	–	ibm

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

31 Mar 2022 05:52Current

9.3High risk

Vulners AI Score9.3

EPSS0.975