NVD disclosure day

Published threat advisories for April 1, 2022

CVE-2022-22965

Spring Framework Remote Code Execution Vulnerability

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

A vulnerability in the Spring Framework could allow unauthorized code execution, impacting organizations using affected applications. This poses a business risk as attackers could gain control of systems, potentially leading to data breaches or service disruptions. Applying vendor-provided updates is recommended.

NVD published: April 1, 2022 • CISA KEV

CVE advisoryKnown Exploit

CVE-2022-22963

Spring Cloud Function: Remote Code Execution Risk

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

Certain versions of Spring Cloud Function are susceptible to remote code execution and local resource access when processing specially crafted expressions. This could lead to unauthorized control of affected systems, posing a business risk.

NVD published: April 1, 2022 • CISA KEV