Communications Communications Policy Management

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-22963 Maven CRITICAL POC KEV PATCH THREAT Act Now

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Java RCE Code Injection Spring Cloud Function Banking Branch +26

NVD Exploit-DB

CVSS 3.1

9.8

EPSS

99.9%

CVE-2021-3449 Cargo MEDIUM PATCH This Month

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. This NULL Pointer Dereference vulnerability could allow attackers to crash the application by dereferencing a null pointer.

Null Pointer Dereference OpenSSL Denial Of Service Debian Linux Freebsd +103

NVD

CVSS 3.1

5.9

EPSS

62.9%

CVE-2022-22963 Maven

EPSS 100% CVSS 9.8

CRITICAL POC KEV PATCH THREAT Act Now

Java RCE Code Injection +28

NVD Exploit-DB

CVE-2021-3449 Cargo

EPSS 63% CVSS 5.9

MEDIUM PATCH This Month

Null Pointer Dereference OpenSSL Denial Of Service +105

NVD