Skip to content
OpenAdvisories

Archive

March 2022

Vulnerabilities first published in this month (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-1040 Exploited Public exploit Scanner template EPSS 100%

    An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Soph…

    KEV Mar 31, 2022
  • Critical 9.8
    CVE-2022-26318 Exploited Public exploit EPSS 78%

    On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786. This vulne…

    KEV Mar 25, 2022
  • Critical 10.0
    CVE-2022-22947 Exploited Public exploit Scanner template EPSS 98%

    Spring Cloud Gateway vulnerable to Code Injection when Gateway Actuator endpoint enabled, exposed, unsecured

    In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could al…

    KEV May 16, 2022