CVE-2022-22947: vmware spring cloud gateway +9 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2022-22947

CVSS 10.0 · Critical KEV · sudah dieksploitasi EPSS 98,3%

Kerentanan Improper Control of Generation of Code ('Code Injection') pada vmware spring cloud gateway, oracle commerce guided search +8 lainnya. Skor CVSS 3.1 10.0 (Critical) menurut NVD. Masuk katalog KEV CISA pada 16 Mei 2022, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote execution on the remote host.

Rincian

Terbit di NVD: 3 Maret 2022
Terakhir diubah: 17 Juni 2026
Status NVD: Analyzed
CVSS 3.1: 10.0 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-94: Improper Control of Generation of Code ('Code Injection')
CWE-917: Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')
EPSS (30 hari): 98,3% peluang dieksploitasi; lebih tinggi dari 99,9% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama: VMware Spring Cloud Gateway Code Injection Vulnerability
Masuk KEV: 16 Mei 2022
Tenggat CISA: 6 Juni 2022 (untuk instansi federal AS)
Ransomware: Belum tercatat
Tindakan wajib: Apply updates per vendor instructions.

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
vmware	spring cloud gateway	Semua versi sebelum 3.0.7
vmware	spring cloud gateway	Versi 3.1.0
oracle	commerce guided search	Versi 11.3.2
oracle	communications cloud native core binding support function	Versi 1.11.0
oracle	communications cloud native core binding support function	Versi 22.1.3
oracle	communications cloud native core console	Versi 22.2.0
oracle	communications cloud native core network exposure function	Versi 22.1.0
oracle	communications cloud native core network function cloud native environment	Versi 1.10.0
oracle	communications cloud native core network repository function	Versi 1.15.0
oracle	communications cloud native core network repository function	Versi 1.15.1
oracle	communications cloud native core network repository function	Versi 22.1.2
oracle	communications cloud native core network repository function	Versi 22.2.0
oracle	communications cloud native core network slice selection function	Versi 1.8.0
oracle	communications cloud native core network slice selection function	Versi 22.1.0
oracle	communications cloud native core security edge protection proxy	Versi 22.1.1
oracle	communications cloud native core service communication proxy	Versi 1.15.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://tanzu.vmware.com/security/cve-2022-22947 mitigasi · advisory vendor
https://www.oracle.com/security-alerts/cpuapr2022.html patch · advisory pihak ketiga
https://www.oracle.com/security-alerts/cpujul2022.html patch · advisory pihak ketiga
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-22947 pemerintah AS
http://packetstormsecurity.com/files/166219/Spring-Cloud-Gateway-3.1.0-Remote-Code-Execution.html exploit · advisory pihak ketiga · vdb entry
http://packetstormsecurity.com/files/168742/Spring-Cloud-Gateway-3.1.0-Remote-Code-Execution.html exploit · advisory pihak ketiga · vdb entry

Sumber: NVD · CVE.org · KEV CISA · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.