Vulnerability in Spring Framework Affecting Cisco Products: March 2022
On March 31, 2022, the following critical vulnerability in the Spring Framework affecting Spring MVC and Spring WebFlux applications running on JDK 9+ was released: CVE-2022-22965: Spring Framework RCE via Data Binding on JDK 9+ For a description of this vulnerability, see VMware Spring Framework Security Vulnerability Report ["https://tanzu.vmware.com/security/cve-2022-22965"].
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-22965US | critical9.8OT kritisch | KEV | ||
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Security Vulnerability Policyexternal
- Cisco Bug Search Toolexternal
- CSCwb41735external
- CSCwb43637external
- CSCwb43643external
- CSCwb43650external
- CSCwb43658external
- CSCwb43662external
Behebungen (12)
- BehobenCisco Emergency Responder
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Evolved Programmable Network Manager (EPNM)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco HyperFlex HX Data Platform
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco IoT Field Network Director (IoT-FND)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Prime Collaboration Deployment
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Prime License Manager
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Secure Firewall Management Center (FMC)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Secure Firewall Threat Defense (FTD) Software
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Unified Communications Manager
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Unified Communications Manager / Cisco Unity Connection
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Unified Communications Manager IM and Presence Service
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Unity Connection
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan