Back to CVE Browser

CVE-2022-22963

🔥 Known Exploited (CISA KEV)CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2022-04-01

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.

Affected Platforms (CPE)

📦

Vmware

Spring Cloud Function

<= 3.1.6>= 3.2.0 and <= 3.2.2

📦

Oracle

Banking Branch

= 14.5

📦

Oracle

Banking Cash Management

= 14.5

📦

Oracle

Banking Corporate Lending Process Management

= 14.5

References & Advisories

🔗 http://packetstormsecurity.com/files/173430/Spring-Cloud-3.2.2-Remote-Command-Execution.html

🔗 https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0005

🔗 https://tanzu.vmware.com/security/cve-2022-22963

🔗 https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-scf-rce-DQrHhJxH

🔗 https://www.oracle.com/security-alerts/cpuapr2022.html

🔗 https://www.oracle.com/security-alerts/cpujul2022.html

🔗 http://packetstormsecurity.com/files/173430/Spring-Cloud-3.2.2-Remote-Command-Execution.html

🔗 https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0005

Related Vulnerabilities

CVE-2026-148566.3

A stored Cross-Site Scripting (XSS) vulnerability in the file upload functionality of the Media Manager in TastyIgniter v4.3.0, ca...

CVE-2026-124959.2

Denial-of-service (DoS) vulnerability due to a stack buffer overflow in the http_gdpr_decrypt function of the Mercusys MB115-4G de...

CVE-2026-165545.1

cJSON library is vulnerable to an integer overflow in the print_string_ptr() function in cJSON.c on 32-bit platforms. The escape_c...

The Quiz and Survey Master (QSM) WordPress plugin before 11.1.3 does not implement rate limiting or standard failed-login auditin...