CVE-2022-22947

Scores

EPSS

0.945High94.5%
0%20%40%60%80%100%

Percentile: 94.5%

CVSS

10.0Critical3.x
0246810

CVSS Score: 10.0/10

All CVSS Scores

CVSS 3.x
10.0

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CVSS 2.0
6.8

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Description

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote execution on the remote host.

Scaner-VS 7 — a modern vulnerability management solution

Uses this database for vulnerability detection. High-speed search, cross-platform, advanced configuration audit, and flexible filtering. Suitable for organizations of any size.
Learn more about Scaner-VS 7

Sources

nvd

CWEs

CWE-94

Related Vulnerabilities

Exploits

Exploit ID: 50799

Source: exploitdb

URL: https://www.exploit-db.com/exploits/50799

Exploit ID: CVE-2022-22947

Source: github-poc

URL: https://github.com/cc3305/CVE-2022-22947

Vulnerable Software (10)

Type: Configuration

Vendor: oracle

Product: commerce_guided_search

Operating System: * * *

Trait:
{
  "cpe_match": [
    {
      "cpe23uri": "cpe:2.3:a:oracle:commerce_guided_search:11.3.2:*:*:*:*:*:*:*",
      "vulnerable": true
    },
    {
      "cpe23uri": "cpe:2.3:a:oracle:communications_clou...

Source: nvd

Type: Configuration

Vendor: oracle

Product: communications_cloud_native_core_binding_support_function

Operating System: * * *

Trait:
{
  "cpe_match": [
    {
      "cpe23uri": "cpe:2.3:a:oracle:commerce_guided_search:11.3.2:*:*:*:*:*:*:*",
      "vulnerable": true
    },
    {
      "cpe23uri": "cpe:2.3:a:oracle:communications_clou...

Source: nvd

Type: Configuration

Vendor: oracle

Product: communications_cloud_native_core_console

Operating System: * * *

Trait:
{
  "cpe_match": [
    {
      "cpe23uri": "cpe:2.3:a:oracle:commerce_guided_search:11.3.2:*:*:*:*:*:*:*",
      "vulnerable": true
    },
    {
      "cpe23uri": "cpe:2.3:a:oracle:communications_clou...

Source: nvd

Type: Configuration

Vendor: oracle

Product: communications_cloud_native_core_network_exposure_function

Operating System: * * *

Trait:
{
  "cpe_match": [
    {
      "cpe23uri": "cpe:2.3:a:oracle:commerce_guided_search:11.3.2:*:*:*:*:*:*:*",
      "vulnerable": true
    },
    {
      "cpe23uri": "cpe:2.3:a:oracle:communications_clou...

Source: nvd

Type: Configuration

Vendor: oracle

Product: communications_cloud_native_core_network_function_cloud_native_environment

Operating System: * * *

Trait:
{
  "cpe_match": [
    {
      "cpe23uri": "cpe:2.3:a:oracle:commerce_guided_search:11.3.2:*:*:*:*:*:*:*",
      "vulnerable": true
    },
    {
      "cpe23uri": "cpe:2.3:a:oracle:communications_clou...

Source: nvd

Type: Configuration

Vendor: oracle

Product: communications_cloud_native_core_network_repository_function

Operating System: * * *

Trait:
{
  "cpe_match": [
    {
      "cpe23uri": "cpe:2.3:a:oracle:commerce_guided_search:11.3.2:*:*:*:*:*:*:*",
      "vulnerable": true
    },
    {
      "cpe23uri": "cpe:2.3:a:oracle:communications_clou...

Source: nvd

Type: Configuration

Vendor: oracle

Product: communications_cloud_native_core_network_slice_selection_function

Operating System: * * *

Trait:
{
  "cpe_match": [
    {
      "cpe23uri": "cpe:2.3:a:oracle:commerce_guided_search:11.3.2:*:*:*:*:*:*:*",
      "vulnerable": true
    },
    {
      "cpe23uri": "cpe:2.3:a:oracle:communications_clou...

Source: nvd

Type: Configuration

Vendor: oracle

Product: communications_cloud_native_core_security_edge_protection_proxy

Operating System: * * *

Trait:
{
  "cpe_match": [
    {
      "cpe23uri": "cpe:2.3:a:oracle:commerce_guided_search:11.3.2:*:*:*:*:*:*:*",
      "vulnerable": true
    },
    {
      "cpe23uri": "cpe:2.3:a:oracle:communications_clou...

Source: nvd

Type: Configuration

Vendor: oracle

Product: communications_cloud_native_core_service_communication_proxy

Operating System: * * *

Trait:
{
  "cpe_match": [
    {
      "cpe23uri": "cpe:2.3:a:oracle:commerce_guided_search:11.3.2:*:*:*:*:*:*:*",
      "vulnerable": true
    },
    {
      "cpe23uri": "cpe:2.3:a:oracle:communications_clou...

Source: nvd

Type: Configuration

Vendor: vmware

Product: spring_cloud_gateway

Operating System: * * *

Trait:
{
  "cpe_match": [
    {
      "cpe23uri": "cpe:2.3:a:vmware:spring_cloud_gateway:*:*:*:*:*:*:*:*",
      "versionEndExcluding": "3.0.7",
      "vulnerable": true
    },
    {
      "cpe23uri": "cpe:2...

Source: nvd