CVE-2022-22947
🔥 Known Exploited (CISA KEV)CRITICAL
10.0
CVSS Severity Score
Vulnerability Description
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote execution on the remote host.
Affected Platforms (CPE)
📦
Vmware
Spring Cloud Gateway
< 3.0.7= 3.1.0
📦
Oracle
Commerce Guided Search
= 11.3.2
📦
Oracle
Communications Cloud Native Core Binding Support Function
= 1.11.0= 22.1.3
📦
Oracle
Communications Cloud Native Core Console
= 22.2.0