Archive

22 June 2022

Vulnerabilities first published on this day (UTC), newest first.

← May 2022 2022 / June /22 July 2022 →

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.0

CVE-2022-22980 Public exploit EPSS 18%

SpEL Injection in Spring Data MongoDB

A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized.

org.springframework.data:spring-data-mongodb Maven

Jun 22, 2022
Medium 5.3

CVE-2022-34298 Public exploit

NT auth module vulnerability in OpenAM

The NT auth module in OpenAM before 14.6.6 allows a "replace Samba username attack."

org.openidentityplatform.openam:openam-core Maven

Jun 22, 2022