Networking-Forums.com

Vulnerability in Spring Framework Affecting Cisco Products: March 2022

<p>On March 31, 2022, the following critical vulnerability in the Spring Framework affecting Spring MVC and Spring WebFlux applications running on JDK 9+ was released:&nbsp;</p>
<p>&nbsp; &nbsp; CVE-2022-22965: Spring Framework RCE via Data Binding on JDK 9+</p>
<p>For a description of this vulnerability, see <a href="https://tanzu.vmware.com/security/cve-2022-22965">VMware Spring Framework Security Vulnerability Report</a>.</p>
<p>This advisory will be updated as additional information becomes available.</p>
<p>This advisory is available at the following link:<br><a href="https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67">https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67</a></p>

     
         
Security Impact Rating:  Critical
   
   
       
CVE: CVE-2022-22965
Source: Vulnerability in Spring Framework Affecting Cisco Products: March 2022 (https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Vulnerability%20in%20Spring%20Framework%20Affecting%20Cisco%20Products:%20March%202022&vs_k=1)