CVE Watch—

CVE-2022-22963

VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability

CVSS

—

Sem CVSS

EPSS

99.9%

p100

KEV

SIM

25 de ago. de 2022

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

99.9%EPSS · 30 dias99.9%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

VMware Tanzu / Spring Cloud

Vulnerabilidade

VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability

Adicionado ao KEV

25 de ago. de 2022

Corrigir até

15 de set. de 2022

Uso conhecido em ransomware

Não

Descrição resumida

When using routing functionality in VMware Tanzu's Spring Cloud Function, it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.

Ação necessária

Apply updates per vendor instructions.

Notas

https://tanzu.vmware.com/security/cve-2022-22963; https://nvd.nist.gov/vuln/detail/CVE-2022-22963

CVEs relacionados

Nenhum CVE relacionado por CWE ou produto.