CVE-2022-22963 in vmware spring cloud function
The LogPulse agent checks every host for the vulnerable version of this software, so you see where the CVE is present.
What the vulnerability is
In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.
Affected software: vmware spring cloud function, oracle banking branch, oracle banking cash management, oracle banking corporate lending process management, oracle banking credit facilities process management, oracle banking electronic data exchange for corporates, oracle banking liquidity management, oracle banking origination, oracle banking supply chain finance, oracle banking trade finance process management
Scores
- CVSS: 9.8 (critical)
- EPSS: 99.94% chance of exploitation in the next 30 days
- CISA KEV: Known exploited, listed 2022-08-25
- Published: 2022-04-01
What LogPulse has for it
- Detection rule: No
- Agent check (vulnerable version): Yes, published
- Mitigation: No
Source data: NIST NVD, CISA KEV and FIRST EPSS. LogPulse processes new CVEs every hour.
We build every detection with great care, but no two environments are the same. Log sources, parsing and configuration differ, so test a detection in your own environment before you rely on it.