oracle communications cloud native core network function cloud native environment güvenlik açıkları (CVE)

oracle communications cloud native core network function cloud native environment için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

3 sonuç
9.8Kritik
CVE-2022-22965 KEV

Spring Framework JDK 9+ Remote Code Execution Vulnerability

Spring Framework

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot…

100%EPSS
10.0Kritik
CVE-2022-22947 KEV

VMware Spring Cloud Gateway Code Injection Vulnerability

Spring Cloud Gateway

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could al…

98%EPSS