$ cve CVE-2022-22947 JSON

CVE-2022-22947 KEV EXPLOIT

10.0

CRITICAL · CVSS 3.1 · EPSS 98.3% (pctl 100)

Patch first

On CISA KEV — known exploited in the wild, due 2022-06-06.

Description

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote execution on the remote host.

Scoring

CVSS	10.0 (CRITICAL, v3.1)
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS	98.25% — more likely to be exploited than 100% of all CVEs
Weakness	CWE-94
On CISA KEV	yes — remediate by 2022-06-06
Public exploit	yes
Published	2022-03-03
Last modified	2026-06-17

CISA KEV

Name	VMware Spring Cloud Gateway Code Injection Vulnerability
Added	2022-05-16
Due	2022-06-06
Vendor / product	VMware / Spring Cloud Gateway
Ransomware use	none reported

Affected (10)

Vendor	Product
oracle	commerce guided search
oracle	communications cloud native core binding support function
oracle	communications cloud native core console
oracle	communications cloud native core network exposure function
oracle	communications cloud native core network function cloud native environment
oracle	communications cloud native core network repository function
oracle	communications cloud native core network slice selection function
oracle	communications cloud native core security edge protection proxy
oracle	communications cloud native core service communication proxy
vmware	spring cloud gateway

Public exploits

Source	Title	Date
exploit-db	Spring Cloud Gateway 3.1.0 - Remote Code Execution (RCE)	2022-03-07

References

→ the Explorer · watch your stack · NVD