CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-22060

In Spring Framework versions 5.3.0 - 5.3.13, 5.2.0 - 5.2.18, and older unsupported versions, it is possible for a user to provide malicious input to cause the insertion of additional log entries. This is a follow-up to CVE-2021-22096 that protects against additional types of input and in more places of the Spring Framework codebase.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 42.4%

CVSS Severity

CVSS v3 Score 4.3

CVSS v2 Score 4.0

References

Products affected by CVE-2021-22060

Oracle » Communications Cloud Native Core Console » Version: 1.9.0

cpe:2.3:a:oracle:communications_cloud_native_core_console:1.9.0
Oracle » Communications Cloud Native Core Service Communication Proxy » Version: 1.15.0

cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:1.15.0
Vmware » Spring Framework » Version: 5.2.0

cpe:2.3:a:vmware:spring_framework:5.2.0
Vmware » Spring Framework » Version: 5.2.1

cpe:2.3:a:vmware:spring_framework:5.2.1
Vmware » Spring Framework » Version: 5.2.10

cpe:2.3:a:vmware:spring_framework:5.2.10
Vmware » Spring Framework » Version: 5.2.11

cpe:2.3:a:vmware:spring_framework:5.2.11
Vmware » Spring Framework » Version: 5.2.12

cpe:2.3:a:vmware:spring_framework:5.2.12
Vmware » Spring Framework » Version: 5.2.13

cpe:2.3:a:vmware:spring_framework:5.2.13
Vmware » Spring Framework » Version: 5.2.14

cpe:2.3:a:vmware:spring_framework:5.2.14
Vmware » Spring Framework » Version: 5.2.15

cpe:2.3:a:vmware:spring_framework:5.2.15
Vmware » Spring Framework » Version: 5.2.16

cpe:2.3:a:vmware:spring_framework:5.2.16
Vmware » Spring Framework » Version: 5.2.17

cpe:2.3:a:vmware:spring_framework:5.2.17
Vmware » Spring Framework » Version: 5.2.18

cpe:2.3:a:vmware:spring_framework:5.2.18
Vmware » Spring Framework » Version: 5.2.2

cpe:2.3:a:vmware:spring_framework:5.2.2
Vmware » Spring Framework » Version: 5.2.3

cpe:2.3:a:vmware:spring_framework:5.2.3
Vmware » Spring Framework » Version: 5.2.4

cpe:2.3:a:vmware:spring_framework:5.2.4
Vmware » Spring Framework » Version: 5.2.5

cpe:2.3:a:vmware:spring_framework:5.2.5
Vmware » Spring Framework » Version: 5.2.6

cpe:2.3:a:vmware:spring_framework:5.2.6
Vmware » Spring Framework » Version: 5.2.7

cpe:2.3:a:vmware:spring_framework:5.2.7
Vmware » Spring Framework » Version: 5.2.8

cpe:2.3:a:vmware:spring_framework:5.2.8
Vmware » Spring Framework » Version: 5.2.9

cpe:2.3:a:vmware:spring_framework:5.2.9
Vmware » Spring Framework » Version: 5.3.0

cpe:2.3:a:vmware:spring_framework:5.3.0
Vmware » Spring Framework » Version: 5.3.1

cpe:2.3:a:vmware:spring_framework:5.3.1
Vmware » Spring Framework » Version: 5.3.10

cpe:2.3:a:vmware:spring_framework:5.3.10
Vmware » Spring Framework » Version: 5.3.11

cpe:2.3:a:vmware:spring_framework:5.3.11
Vmware » Spring Framework » Version: 5.3.12

cpe:2.3:a:vmware:spring_framework:5.3.12
Vmware » Spring Framework » Version: 5.3.13

cpe:2.3:a:vmware:spring_framework:5.3.13
Vmware » Spring Framework » Version: 5.3.2

cpe:2.3:a:vmware:spring_framework:5.3.2
Vmware » Spring Framework » Version: 5.3.3

cpe:2.3:a:vmware:spring_framework:5.3.3
Vmware » Spring Framework » Version: 5.3.4

cpe:2.3:a:vmware:spring_framework:5.3.4
Vmware » Spring Framework » Version: 5.3.5

cpe:2.3:a:vmware:spring_framework:5.3.5
Vmware » Spring Framework » Version: 5.3.6

cpe:2.3:a:vmware:spring_framework:5.3.6
Vmware » Spring Framework » Version: 5.3.7

cpe:2.3:a:vmware:spring_framework:5.3.7
Vmware » Spring Framework » Version: 5.3.8

cpe:2.3:a:vmware:spring_framework:5.3.8
Vmware » Spring Framework » Version: 5.3.9

cpe:2.3:a:vmware:spring_framework:5.3.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-22060

Products

Pricing

Contact Us