9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD
Description
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.
Affected (89)
Products: Vmware: Spring Framework · Cisco: Cx Cloud Agent · Oracle: Communications Cloud Native Core Automated Test Suite, Communications Cloud Native Core Console, Communications Cloud Native Core Network Exposure Function, Communications Cloud Native Core Network Function Cloud Native Environment, Communications Cloud Native Core Network Repository Function, Communications Cloud Native Core Network Slice Selection Function, Communications Cloud Native Core Policy, Communications Cloud Native Core Security Edge Protection Proxy, Communications Cloud Native Core Unified Data Repository, Communications Policy Management, Financial Services Analytical Applications Infrastructure, Financial Services Behavior Detection Platform, Financial Services Enterprise Case Management, Mysql Enterprise Monitor, Product Lifecycle Analytics, Retail Xstore Point Of Service, Sd Wan Edge, Commerce Platform, Communications Cloud Native Core Binding Support Function, Communications Unified Inventory Management, Retail Bulk Data Integration, Retail Customer Management And Segmentation Foundation, Retail Financial Integration, Retail Integration Bus, Retail Merchandising System, Weblogic Server · +2 more
Show all products
Vmware: Spring Framework · Cisco: Cx Cloud Agent · Oracle: Communications Cloud Native Core Automated Test Suite, Communications Cloud Native Core Console, Communications Cloud Native Core Network Exposure Function, Communications Cloud Native Core Network Function Cloud Native Environment, Communications Cloud Native Core Network Repository Function, Communications Cloud Native Core Network Slice Selection Function, Communications Cloud Native Core Policy, Communications Cloud Native Core Security Edge Protection Proxy, Communications Cloud Native Core Unified Data Repository, Communications Policy Management, Financial Services Analytical Applications Infrastructure, Financial Services Behavior Detection Platform, Financial Services Enterprise Case Management, Mysql Enterprise Monitor, Product Lifecycle Analytics, Retail Xstore Point Of Service, Sd Wan Edge, Commerce Platform, Communications Cloud Native Core Binding Support Function, Communications Unified Inventory Management, Retail Bulk Data Integration, Retail Customer Management And Segmentation Foundation, Retail Financial Integration, Retail Integration Bus, Retail Merchandising System, Weblogic Server · Veritas: Access Appliance, Flex Appliance, Netbackup Appliance, Netbackup Flex Scale Appliance, Netbackup Virtual Appliance · Siemens: Operation Scheduler, Simatic Speech Assistant For Machines, Sinec Network Management System, Sipass Integrated, Siveillance Identity
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 5.2.20 |
| Running on/with | Platform Versions |
|---|---|
Oracle Jdk | From 9 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.1.0 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.9.0 | |
| Version 1.9.0 | |
| Version 22.1.0 | |
| Version 1.10.0 | |
| Version 1.15.0 | |
| Version 1.15.0 | |
| Version 1.15.0 | |
| Version 1.7.0 | |
| Version 1.15.0 | |
| Version 12.6.0.0.0 | |
| Version 8.1.1 | |
| Version 8.1.1.0 | |
| Version 8.1.1.0 | |
| Before 8.0.29 | |
| Version 3.6.1 | |
| Version 20.0.1 | |
| Version 9.0 |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Version 7.4.3.100 | |
| Version 1.3 | |
| Version 4.0.0.1 maintenance_release1 | |
| Version 2.1 | |
| Version 4.0.0.1 maintenance_release1 |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.0.4 | |
| Before 1.2.1 | |
| Before 1.0.3 | |
| Version 2.80 | |
| Version 1.5 |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Version 11.3.2 | |
| Version 22.1.3 | |
| Version 7.4.1 | |
| Version 16.0.3 | |
| Version 17.0 | |
| Version 14.1.3.2 | |
| Version 14.1.3.2 | |
| Version 16.0.3 | |
| Version 12.2.1.3.0 |
References (18)
Source: security@vmware.com
ExploitThird Party AdvisoryVDB Entry
Source: security@vmware.com
Third Party AdvisoryVDB Entry
Source: security@vmware.com
PatchThird Party Advisory
Source: security@vmware.com
Third Party Advisory
Source: security@vmware.com
MitigationVendor Advisory
Source: security@vmware.com
Third Party Advisory
Source: security@vmware.com
Third Party Advisory
Source: security@vmware.com
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
US Government Resource
Timeline
No history available yet.