CVE
CVE-2022-22947
- First Reported
- Dec 16, 2024
- Latest Reported
- Dec 16, 2024
CVE Enrichment
- CVSS
- 10.0 CRITICAL
- EPSS
- 98.25%
- EPSS Percentile
- 99.92%
- CISA KEV
- YES — Known Exploited Vulnerability
Description
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote execution on the remote host.
Technical Details
- CVSS Version
- 3.1
- CNA / NVD Source
- security@vmware.com
- Published
- 04-Mar-2022 05:15
- Last Modified
- 17-Jun-2026 11:29
- EPSS Date
- 2026-10-16
- CWE
- CWE-94, CWE-917
CVSS Vector
CVSS:3.1 AV:N /
AC:L /
PR:N /
UI:N /
S:C /
C:H /
I:H /
A:H
CISA KEV Details
- Date Added
- 2022-05-16
- Remediation Due
- 2022-06-06
- Known Ransomware Campaign Use
- Unknown
- Required Action
- Apply updates per vendor instructions.
- Notes
- https://nvd.nist.gov/vuln/detail/CVE-2022-22947
Affected Products / Versions
- vmware / spring_cloud_gateway
Version / affected range: * · before (exclusive) 3.0.7
cpe:2.3:a:vmware:spring_cloud_gateway:*:*:*:*:*:*:*:* - vmware / spring_cloud_gateway
Version / affected range: 3.1.0
cpe:2.3:a:vmware:spring_cloud_gateway:3.1.0:*:*:*:*:*:*:* - oracle / commerce_guided_search
Version / affected range: 11.3.2
cpe:2.3:a:oracle:commerce_guided_search:11.3.2:*:*:*:*:*:*:* - oracle / communications_cloud_native_core_binding_support_function
Version / affected range: 1.11.0
cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:1.11.0:*:*:*:*:*:*:* - oracle / communications_cloud_native_core_binding_support_function
Version / affected range: 22.1.3
cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.1.3:*:*:*:*:*:*:* - oracle / communications_cloud_native_core_console
Version / affected range: 22.2.0
cpe:2.3:a:oracle:communications_cloud_native_core_console:22.2.0:*:*:*:*:*:*:* - oracle / communications_cloud_native_core_network_exposure_function
Version / affected range: 22.1.0
cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:22.1.0:*:*:*:*:*:*:* - oracle / communications_cloud_native_core_network_function_cloud_native_environment
Version / affected range: 1.10.0
cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:1.10.0:*:*:*:*:*:*:* - oracle / communications_cloud_native_core_network_repository_function
Version / affected range: 1.15.0
cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:1.15.0:*:*:*:*:*:*:* - oracle / communications_cloud_native_core_network_repository_function
Version / affected range: 1.15.1
cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:1.15.1:*:*:*:*:*:*:* - oracle / communications_cloud_native_core_network_repository_function
Version / affected range: 22.1.2
cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:22.1.2:*:*:*:*:*:*:* - oracle / communications_cloud_native_core_network_repository_function
Version / affected range: 22.2.0
cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:22.2.0:*:*:*:*:*:*:* - oracle / communications_cloud_native_core_network_slice_selection_function
Version / affected range: 1.8.0
cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:1.8.0:*:*:*:*:*:*:* - oracle / communications_cloud_native_core_network_slice_selection_function
Version / affected range: 22.1.0
cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:22.1.0:*:*:*:*:*:*:* - oracle / communications_cloud_native_core_security_edge_protection_proxy
Version / affected range: 22.1.1
cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:22.1.1:*:*:*:*:*:*:* - oracle / communications_cloud_native_core_service_communication_proxy
Version / affected range: 1.15.0
cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:1.15.0:*:*:*:*:*:*:*
References
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- CISA Advisory
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.
Reported Context (1)
- Spring Boot applications using Spring Cloud Gateway versions 3.1.0, 3.0.0 to 3.0.6, and older unsupported versions are vulnerable to remote code execution (CVE-2022-22947). Spring Boot Actuator Misconfigurations Can Expose Secrets and Enable RCE
MITRE ATT&CK (2)
Vendors (2)
Products (5)
Tools (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.