Vulnerability in Spring Framework Affecting Cisco Products: March 2022
On March 31, 2022, the following critical vulnerability in the Spring Framework affecting Spring MVC and Spring WebFlux applications running on JDK 9+ was released: CVE-2022-22965: Spring Framework RCE via Data Binding on JDK 9+ For a description of this vulnerability, see VMware Spring Framework Security Vulnerability Report ["https://tanzu.vmware.com/security/cve-2022-22965"].
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-22965US | critical9.8OT critical | KEV | ||
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run… | ||||
references
External citations — patches, advisories, analysis.
- Security Vulnerability Policyexternal
- Cisco Bug Search Toolexternal
- CSCwb41735external
- CSCwb43637external
- CSCwb43643external
- CSCwb43650external
- CSCwb43658external
- CSCwb43662external
remediations (12)
- FixedCisco Emergency Responder
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Evolved Programmable Network Manager (EPNM)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco HyperFlex HX Data Platform
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco IoT Field Network Director (IoT-FND)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Prime Collaboration Deployment
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Prime License Manager
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Secure Firewall Management Center (FMC)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Secure Firewall Threat Defense (FTD) Software
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Unified Communications Manager
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Unified Communications Manager / Cisco Unity Connection
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Unified Communications Manager IM and Presence Service
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Unity Connection
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan