VulnCheck KEV: CVE-2022-22947

🗓️ 27 Apr 2022 00:00:00Reported by VulnCheckType

vulncheck_kev🔗 console.vulncheck.com👁 13 Views

Spring Cloud Gateway code injection via Gateway Actuator when the endpoint is enabled and unsecured.

Reporter	Title	Published	Views	Family All 163
GithubExploit	Exploit for Code Injection in Vmware Spring_Cloud_Gateway	23 Aug 202206:38	–	githubexploit
GithubExploit	Exploit for Expression Language Injection in Vmware Spring_Cloud_Gateway	15 Apr 202215:41	–	githubexploit
GithubExploit	Exploit for Code Injection in Vmware Spring_Cloud_Gateway	16 May 202215:27	–	githubexploit
GithubExploit	Exploit for Expression Language Injection in Vmware Spring_Cloud_Gateway	7 Mar 202207:24	–	githubexploit
GithubExploit	Exploit for Code Injection in Vmware Spring_Cloud_Gateway	6 Apr 202209:40	–	githubexploit
GithubExploit	Exploit for Code Injection in Pivotal_Software Spring_Data_Commons	6 Dec 202510:58	–	githubexploit
GithubExploit	Exploit for Code Injection in Vmware Spring_Cloud_Gateway	8 Mar 202209:32	–	githubexploit
GithubExploit	Exploit for Code Injection in Vmware Spring_Cloud_Gateway	21 Mar 202223:37	–	githubexploit
GithubExploit	Exploit for Expression Language Injection in Vmware Spring_Cloud_Gateway	4 Mar 202214:58	–	githubexploit
GithubExploit	Exploit for Expression Language Injection in Vmware Spring_Cloud_Gateway	8 Mar 202209:32	–	githubexploit

Source	Link
console	www.console.vulncheck.com/cve/CVE-2022-22947

27 Apr 2022 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 26.8

CVSS 3.110

EPSS0.98253

SSVC

spring cloud gateway gateway actuator code injection endpoint enabled unsecured