VulnSocial

CVE-2022-22947General(oracle / commerce_guided_search)

LOWCVSS 10.0 · CRITICALCISA KEV

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote execution on the remote host.

oracle CVEsBack to dashboard
1.0/ 10 priority

Sources & remediation

Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2022-06-06. Apply updates per vendor instructions.

Patch / fix
Exploit / PoC references
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-94CWE-917

Priority

LOW

Exploitation

ACTIVE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • commerce_guided_search
  • communications_cloud_native_core_binding_support_function
  • communications_cloud_native_core_console
  • communications_cloud_native_core_network_exposure_function

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • General: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
oraclevmware
Products
commerce_guided_searchcommunications_cloud_native_core_binding_support_functioncommunications_cloud_native_core_consolecommunications_cloud_native_core_network_exposure_functioncommunications_cloud_native_core_network_function_cloud_native_environmentcommunications_cloud_native_core_network_repository_functioncommunications_cloud_native_core_network_slice_selection_functioncommunications_cloud_native_core_security_edge_protection_proxycommunications_cloud_native_core_service_communication_proxyspring_cloud_gateway

12 versions affected across 10 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-03-08: 103-08
Signal classification1 categories
General
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • 🏴‍☠️ The Pirate 🏴‍☠️@Pinperepette
    General

    @super_caz @Napalm51 ma certo, tutto è vulnerabile https://nvd.nist.gov/vuln/detail/CVE-2022-22947

    Post summary

    The tweet references CVE-2022-22947 with a link but offers no details, evidence, or additional context.

    10010349
    16.9K followersView on X
CPE platform detail16 entries

16 of 16 entries

PartVendorProductVersionTarget SWTarget HW
Apporaclecommerce_guided_search11.3.2--
Apporaclecommunications_cloud_native_core_binding_support_function1.11.0--
Apporaclecommunications_cloud_native_core_binding_support_function22.1.3--
Apporaclecommunications_cloud_native_core_console22.2.0--
Apporaclecommunications_cloud_native_core_network_exposure_function22.1.0--
Apporaclecommunications_cloud_native_core_network_function_cloud_native_environment1.10.0--
Apporaclecommunications_cloud_native_core_network_repository_function1.15.0--
Apporaclecommunications_cloud_native_core_network_repository_function1.15.1--
Apporaclecommunications_cloud_native_core_network_repository_function22.1.2--
Apporaclecommunications_cloud_native_core_network_repository_function22.2.0--
Apporaclecommunications_cloud_native_core_network_slice_selection_function1.8.0--
Apporaclecommunications_cloud_native_core_network_slice_selection_function22.1.0--
Apporaclecommunications_cloud_native_core_security_edge_protection_proxy22.1.1--
Apporaclecommunications_cloud_native_core_service_communication_proxy1.15.0--
Appvmwarespring_cloud_gateway---
Appvmwarespring_cloud_gateway3.1.0--

Explore more

Back to dashboardoracle CVEsvmware CVEscommerce_guided_search vulnerabilities