Known Exploited Vulnerabilities August 25, 2022 · CISA KEV Catalog

CVE-2022-22963: VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability

When using routing functionality in VMware Tanzu's Spring Cloud Function, it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.

Read the original at CISA KEV Catalog ↗

Topics

Vulnerabilities & Patching

Mentions

CVE-2022-22963VMware Tanzu

Related

CVE-2018-1273: VMware Tanzu Spring Data Commons Property Binder Vulnerability Known Exploited Vulnerabilities · Mar 25, 2022

CVE-2020-5410: VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability Known Exploited Vulnerabilities · Mar 25, 2022

Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026