CVE-2022-22947 VMware Spring Cloud Gateway
Spring Cloud Gateway applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured.
- CVSS
- not scored
On CISA’s exploited list
VMware Spring Cloud Gateway Code Injection Vulnerability
- Added
- 2022-05-16
- Federal patch deadline
- 2022-06-06
- Ransomware use
- not known