CVE-2022-22963
🔥 Known Exploited (CISA KEV)CRITICAL
9.8
CVSS Severity Score
Vulnerability Description
In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.
Affected Platforms (CPE)
📦
Vmware
Spring Cloud Function
<= 3.1.6>= 3.2.0 and <= 3.2.2
📦
Oracle
Banking Branch
= 14.5
📦
Oracle
Banking Cash Management
= 14.5
📦
Oracle
Banking Corporate Lending Process Management
= 14.5