19 May 2022

3 results · Clear filters · Feed

• High 7.5
  CVE-2022-21500 Public exploit Scanner template EPSS 72%

  Vulnerability in Oracle E-Business Suite (component: Manage Proxies). The supported version that is affected is 12.2. E…

  Oracle User Management
  May 19, 2022
• Medium 5.3
  CVE-2022-22976 Public exploit

  Integer overflow in BCrypt class in Spring Security

  Spring Security versions 5.5.x prior to 5.5.7, 5.6.x prior to 5.6.4, and earlier unsupported versions contain an integer overflow vulnerability. When using the BCrypt class with the maximum work factor (31), the encoder does not perform any salt rounds, due t…

  libspring-java org.springframework.security:spring-security-core Ubuntu Maven
  May 19, 2022
• Critical 9.8
  CVE-2022-22978 Public exploit EPSS 12%

  Authorization bypass in Spring Security

  In spring security versions prior to 5.4.11+, 5.5.7+ , 5.6.4+ and older unsupported versions, RegexRequestMatcher can easily be misconfigured to be bypassed on some servlet containers. Applications using RegexRequestMatcher with `.` in the regular expression …

  libspring-java org.springframework.security:spring-security-core org.springframework.security:spring-security-web Ubuntu Maven
  May 19, 2022