Read the docs

Veritas

Records143All Threatist records
Exploited (KEV)4In CISA KEV
CVSS critical58CVSS 9.0–10.0
CVSS high51CVSS 7.0–8.9

Exploited now

Veritas records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

19 records in Flex Appliance · all components

TI-2022-07142 CVE-2022-22965 · GHSA-36p3-wjmg-h94x

Code injection in Spring Framework

Priority CRITICAL 100KEV

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99638 Published 2022-04-01 Partial fix · 5.2.20.RELEASE, 5.3.18 +2 CWE-94
Open these records in search →