vmware spring cloud function, oracle banking branch, oracle banking cash management +25 lainnya
CVSS 9.8 · Critical KEV · sudah dieksploitasi EPSS 99,9%
Kerentanan Improper Control of Generation of Code ('Code Injection') pada vmware spring cloud function, oracle banking branch +26 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD. Masuk katalog KEV CISA pada 25 Agustus 2022, artinya sudah terbukti dieksploitasi.
In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| vmware | spring cloud function | Semua versi hingga 3.1.6 |
| vmware | spring cloud function | Versi 3.2.0 hingga 3.2.2 |
| oracle | banking branch | Versi 14.5 |
| oracle | banking cash management | Versi 14.5 |
| oracle | banking corporate lending process management | Versi 14.5 |
| oracle | banking credit facilities process management | Versi 14.5 |
| oracle | banking electronic data exchange for corporates | Versi 14.5 |
| oracle | banking liquidity management | Versi 14.2 |
| oracle | banking liquidity management | Versi 14.5 |
| oracle | banking origination | Versi 14.5 |
| oracle | banking supply chain finance | Versi 14.5 |
| oracle | banking trade finance process management | Versi 14.5 |
| oracle | banking virtual account management | Versi 14.5 |
| oracle | communications cloud native core automated test suite | Versi 1.9.0 |
| oracle | communications cloud native core automated test suite | Versi 22.1.0 |
| oracle | communications cloud native core console | Versi 1.9.0 |
| oracle | communications cloud native core console | Versi 22.1.0 |
| oracle | communications cloud native core network exposure function | Versi 22.1.0 |
| oracle | communications cloud native core network function cloud native environment | Versi 1.10.0 |
| oracle | communications cloud native core network function cloud native environment | Versi 22.1.0 |
| oracle | communications cloud native core network function cloud native environment | Versi 22.1.2 |
| oracle | communications cloud native core network repository function | Versi 1.15.0 |
| oracle | communications cloud native core network repository function | Versi 22.1.0 |
| oracle | communications cloud native core network slice selection function | Versi 1.8.0 |
| oracle | communications cloud native core network slice selection function | Versi 22.1.0 |
| oracle | communications cloud native core policy | Versi 1.15.0 |
| oracle | communications cloud native core policy | Versi 22.1.0 |
| oracle | communications cloud native core policy | Versi 22.1.3 |
| oracle | communications cloud native core security edge protection proxy | Versi 1.7.0 |
| oracle | communications cloud native core security edge protection proxy | Versi 22.1.0 |
| oracle | communications cloud native core unified data repository | Versi 1.15.0 |
| oracle | communications cloud native core unified data repository | Versi 22.1.0 |
| oracle | communications communications policy management | Versi 12.6.0.0.0 |
| oracle | financial services analytical applications infrastructure | Versi 8.1.1.0 |
| oracle | financial services analytical applications infrastructure | Versi 8.1.2.0 |
| oracle | financial services behavior detection platform | Versi 8.1.1.0 |
| oracle | financial services behavior detection platform | Versi 8.1.1.1 |
| oracle | financial services behavior detection platform | Versi 8.1.2.0 |
| oracle | financial services enterprise case management | Versi 8.1.1.0 |
| oracle | financial services enterprise case management | Versi 8.1.1.1 |
| oracle | financial services enterprise case management | Versi 8.1.2.0 |
| oracle | mysql enterprise monitor | Semua versi hingga 8.0.29 |
| oracle | product lifecycle analytics | Versi 3.6.1.0 |
| oracle | retail xstore point of service | Versi 20.0.1 |
| oracle | retail xstore point of service | Versi 21.0.0 |
| oracle | sd-wan edge | Versi 9.0 |
| oracle | sd-wan edge | Versi 9.1 |