CVE
CVE-2022-22963
- First Reported
- Apr 1, 2022
- Latest Reported
- Apr 1, 2022
CVE Enrichment
- CVSS
- 9.8 CRITICAL
- EPSS
- 99.94%
- EPSS Percentile
- 99.97%
- CISA KEV
- YES — Known Exploited Vulnerability
Description
In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.
Technical Details
- CVSS Version
- 3.1
- CNA / NVD Source
- security@vmware.com
- Published
- 02-Apr-2022 06:15
- Last Modified
- 17-Jun-2026 11:29
- EPSS Date
- 2026-10-19
- CWE
- CWE-94, CWE-917
CVSS Vector
CVSS:3.1 AV:N /
AC:L /
PR:N /
UI:N /
S:U /
C:H /
I:H /
A:H
CISA KEV Details
- Date Added
- 2022-08-25
- Remediation Due
- 2022-09-15
- Known Ransomware Campaign Use
- Unknown
- Required Action
- Apply updates per vendor instructions.
- Notes
- https://tanzu.vmware.com/security/cve-2022-22963; https://nvd.nist.gov/vuln/detail/CVE-2022-22963
Affected Products / Versions
- vmware / spring_cloud_function
Version / affected range: * · through (inclusive) 3.1.6
cpe:2.3:a:vmware:spring_cloud_function:*:*:*:*:*:*:*:* - vmware / spring_cloud_function
Version / affected range: * · from (inclusive) 3.2.0 · through (inclusive) 3.2.2
cpe:2.3:a:vmware:spring_cloud_function:*:*:*:*:*:*:*:* - oracle / banking_branch
Version / affected range: 14.5
cpe:2.3:a:oracle:banking_branch:14.5:*:*:*:*:*:*:* - oracle / banking_cash_management
Version / affected range: 14.5
cpe:2.3:a:oracle:banking_cash_management:14.5:*:*:*:*:*:*:* - oracle / banking_corporate_lending_process_management
Version / affected range: 14.5
cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.5:*:*:*:*:*:*:* - oracle / banking_credit_facilities_process_management
Version / affected range: 14.5
cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.5:*:*:*:*:*:*:* - oracle / banking_electronic_data_exchange_for_corporates
Version / affected range: 14.5
cpe:2.3:a:oracle:banking_electronic_data_exchange_for_corporates:14.5:*:*:*:*:*:*:* - oracle / banking_liquidity_management
Version / affected range: 14.2
cpe:2.3:a:oracle:banking_liquidity_management:14.2:*:*:*:*:*:*:* - oracle / banking_liquidity_management
Version / affected range: 14.5
cpe:2.3:a:oracle:banking_liquidity_management:14.5:*:*:*:*:*:*:* - oracle / banking_origination
Version / affected range: 14.5
cpe:2.3:a:oracle:banking_origination:14.5:*:*:*:*:*:*:* - oracle / banking_supply_chain_finance
Version / affected range: 14.5
cpe:2.3:a:oracle:banking_supply_chain_finance:14.5:*:*:*:*:*:*:* - oracle / banking_trade_finance_process_management
Version / affected range: 14.5
cpe:2.3:a:oracle:banking_trade_finance_process_management:14.5:*:*:*:*:*:*:* - oracle / banking_virtual_account_management
Version / affected range: 14.5
cpe:2.3:a:oracle:banking_virtual_account_management:14.5:*:*:*:*:*:*:* - oracle / communications_cloud_native_core_automated_test_suite
Version / affected range: 1.9.0
cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:1.9.0:*:*:*:*:*:*:* - oracle / communications_cloud_native_core_automated_test_suite
Version / affected range: 22.1.0
cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:22.1.0:*:*:*:*:*:*:* - oracle / communications_cloud_native_core_console
Version / affected range: 1.9.0
cpe:2.3:a:oracle:communications_cloud_native_core_console:1.9.0:*:*:*:*:*:*:* - oracle / communications_cloud_native_core_console
Version / affected range: 22.1.0
cpe:2.3:a:oracle:communications_cloud_native_core_console:22.1.0:*:*:*:*:*:*:* - oracle / communications_cloud_native_core_network_exposure_function
Version / affected range: 22.1.0
cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:22.1.0:*:*:*:*:*:*:* - oracle / communications_cloud_native_core_network_function_cloud_native_environment
Version / affected range: 1.10.0
cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:1.10.0:*:*:*:*:*:*:* - oracle / communications_cloud_native_core_network_function_cloud_native_environment
Version / affected range: 22.1.0
cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:22.1.0:*:*:*:*:*:*:* - oracle / communications_cloud_native_core_network_function_cloud_native_environment
Version / affected range: 22.1.2
cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:22.1.2:*:*:*:*:*:*:* - oracle / communications_cloud_native_core_network_repository_function
Version / affected range: 1.15.0
cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:1.15.0:*:*:*:*:*:*:* - oracle / communications_cloud_native_core_network_repository_function
Version / affected range: 22.1.0
cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:22.1.0:*:*:*:*:*:*:* - oracle / communications_cloud_native_core_network_slice_selection_function
Version / affected range: 1.8.0
cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:1.8.0:*:*:*:*:*:*:* - oracle / communications_cloud_native_core_network_slice_selection_function
Version / affected range: 22.1.0
cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:22.1.0:*:*:*:*:*:*:* - oracle / communications_cloud_native_core_policy
Version / affected range: 1.15.0
cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.15.0:*:*:*:*:*:*:* - oracle / communications_cloud_native_core_policy
Version / affected range: 22.1.0
cpe:2.3:a:oracle:communications_cloud_native_core_policy:22.1.0:*:*:*:*:*:*:* - oracle / communications_cloud_native_core_policy
Version / affected range: 22.1.3
cpe:2.3:a:oracle:communications_cloud_native_core_policy:22.1.3:*:*:*:*:*:*:* - oracle / communications_cloud_native_core_security_edge_protection_proxy
Version / affected range: 1.7.0
cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:1.7.0:*:*:*:*:*:*:* - oracle / communications_cloud_native_core_security_edge_protection_proxy
Version / affected range: 22.1.0
cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:22.1.0:*:*:*:*:*:*:* - oracle / communications_cloud_native_core_unified_data_repository
Version / affected range: 1.15.0
cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:1.15.0:*:*:*:*:*:*:* - oracle / communications_cloud_native_core_unified_data_repository
Version / affected range: 22.1.0
cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:22.1.0:*:*:*:*:*:*:* - oracle / communications_communications_policy_management
Version / affected range: 12.6.0.0.0
cpe:2.3:a:oracle:communications_communications_policy_management:12.6.0.0.0:*:*:*:*:*:*:* - oracle / financial_services_analytical_applications_infrastructure
Version / affected range: 8.1.1.0
cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.1.1.0:*:*:*:*:*:*:* - oracle / financial_services_analytical_applications_infrastructure
Version / affected range: 8.1.2.0
cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.1.2.0:*:*:*:*:*:*:* - oracle / financial_services_behavior_detection_platform
Version / affected range: 8.1.1.0
cpe:2.3:a:oracle:financial_services_behavior_detection_platform:8.1.1.0:*:*:*:*:*:*:* - oracle / financial_services_behavior_detection_platform
Version / affected range: 8.1.1.1
cpe:2.3:a:oracle:financial_services_behavior_detection_platform:8.1.1.1:*:*:*:*:*:*:* - oracle / financial_services_behavior_detection_platform
Version / affected range: 8.1.2.0
cpe:2.3:a:oracle:financial_services_behavior_detection_platform:8.1.2.0:*:*:*:*:*:*:* - oracle / financial_services_enterprise_case_management
Version / affected range: 8.1.1.0
cpe:2.3:a:oracle:financial_services_enterprise_case_management:8.1.1.0:*:*:*:*:*:*:* - oracle / financial_services_enterprise_case_management
Version / affected range: 8.1.1.1
cpe:2.3:a:oracle:financial_services_enterprise_case_management:8.1.1.1:*:*:*:*:*:*:* - oracle / financial_services_enterprise_case_management
Version / affected range: 8.1.2.0
cpe:2.3:a:oracle:financial_services_enterprise_case_management:8.1.2.0:*:*:*:*:*:*:* - oracle / mysql_enterprise_monitor
Version / affected range: * · through (inclusive) 8.0.29
cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:* - oracle / product_lifecycle_analytics
Version / affected range: 3.6.1.0
cpe:2.3:a:oracle:product_lifecycle_analytics:3.6.1.0:*:*:*:*:*:*:* - oracle / retail_xstore_point_of_service
Version / affected range: 20.0.1
cpe:2.3:a:oracle:retail_xstore_point_of_service:20.0.1:*:*:*:*:*:*:* - oracle / retail_xstore_point_of_service
Version / affected range: 21.0.0
cpe:2.3:a:oracle:retail_xstore_point_of_service:21.0.0:*:*:*:*:*:*:* - oracle / sd-wan_edge
Version / affected range: 9.0
cpe:2.3:a:oracle:sd-wan_edge:9.0:*:*:*:*:*:*:* - oracle / sd-wan_edge
Version / affected range: 9.1
cpe:2.3:a:oracle:sd-wan_edge:9.1:*:*:*:*:*:*:*
References
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- CISA Advisory
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.
Reported Context (1)
- CVE-2022-22963 (Spring Cloud Function RCE via malicious SpEL Expression) – Spring4Shell and CVE-2022-22963: Affected Versions, Exploitation Conditions and Fixes
CVE (2)
Vendors (3)
Products (6)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.