CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-23463

Nepxion Discovery is a solution for Spring Cloud. Discover is vulnerable to SpEL Injection in discovery-commons. DiscoveryExpressionResolver’s eval method is evaluating expression with a StandardEvaluationContext, allowing the expression to reach and interact with Java classes such as java.lang.Runtime, leading to Remote Code Execution. There is no patch available for this issue at time of publication. There are no known workarounds.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.031

EPSS Ranking 86.3%

CVSS Severity

CVSS v3 Score 9.4

References

Products affected by CVE-2022-23463

Nepxion » Discovery » Version: N/A

cpe:2.3:a:nepxion:discovery:-
Nepxion » Discovery » Version: 3.10.0

cpe:2.3:a:nepxion:discovery:3.10.0
Nepxion » Discovery » Version: 3.10.1

cpe:2.3:a:nepxion:discovery:3.10.1
Nepxion » Discovery » Version: 3.10.3

cpe:2.3:a:nepxion:discovery:3.10.3
Nepxion » Discovery » Version: 3.10.7

cpe:2.3:a:nepxion:discovery:3.10.7
Nepxion » Discovery » Version: 3.11.0

cpe:2.3:a:nepxion:discovery:3.11.0
Nepxion » Discovery » Version: 3.11.3

cpe:2.3:a:nepxion:discovery:3.11.3
Nepxion » Discovery » Version: 3.11.9

cpe:2.3:a:nepxion:discovery:3.11.9
Nepxion » Discovery » Version: 3.12.0

cpe:2.3:a:nepxion:discovery:3.12.0
Nepxion » Discovery » Version: 3.12.2

cpe:2.3:a:nepxion:discovery:3.12.2
Nepxion » Discovery » Version: 3.13.0

cpe:2.3:a:nepxion:discovery:3.13.0
Nepxion » Discovery » Version: 3.13.11

cpe:2.3:a:nepxion:discovery:3.13.11
Nepxion » Discovery » Version: 3.13.13

cpe:2.3:a:nepxion:discovery:3.13.13
Nepxion » Discovery » Version: 3.13.2

cpe:2.3:a:nepxion:discovery:3.13.2
Nepxion » Discovery » Version: 3.13.3

cpe:2.3:a:nepxion:discovery:3.13.3
Nepxion » Discovery » Version: 3.13.5

cpe:2.3:a:nepxion:discovery:3.13.5
Nepxion » Discovery » Version: 3.13.8

cpe:2.3:a:nepxion:discovery:3.13.8
Nepxion » Discovery » Version: 3.15.0

cpe:2.3:a:nepxion:discovery:3.15.0
Nepxion » Discovery » Version: 3.16.1

cpe:2.3:a:nepxion:discovery:3.16.1
Nepxion » Discovery » Version: 3.16.2

cpe:2.3:a:nepxion:discovery:3.16.2
Nepxion » Discovery » Version: 3.16.5

cpe:2.3:a:nepxion:discovery:3.16.5
Nepxion » Discovery » Version: 3.16.6

cpe:2.3:a:nepxion:discovery:3.16.6
Nepxion » Discovery » Version: 3.16.7

cpe:2.3:a:nepxion:discovery:3.16.7
Nepxion » Discovery » Version: 3.19.0

cpe:2.3:a:nepxion:discovery:3.19.0
Nepxion » Discovery » Version: 3.20.1

cpe:2.3:a:nepxion:discovery:3.20.1
Nepxion » Discovery » Version: 3.20.2

cpe:2.3:a:nepxion:discovery:3.20.2
Nepxion » Discovery » Version: 3.20.3

cpe:2.3:a:nepxion:discovery:3.20.3
Nepxion » Discovery » Version: 3.21.0

cpe:2.3:a:nepxion:discovery:3.21.0
Nepxion » Discovery » Version: 3.22.0

cpe:2.3:a:nepxion:discovery:3.22.0
Nepxion » Discovery » Version: 3.23.0

cpe:2.3:a:nepxion:discovery:3.23.0
Nepxion » Discovery » Version: 3.24.0

cpe:2.3:a:nepxion:discovery:3.24.0
Nepxion » Discovery » Version: 3.25.0

cpe:2.3:a:nepxion:discovery:3.25.0
Nepxion » Discovery » Version: 3.26.0

cpe:2.3:a:nepxion:discovery:3.26.0
Nepxion » Discovery » Version: 3.27.0

cpe:2.3:a:nepxion:discovery:3.27.0
Nepxion » Discovery » Version: 3.28.0

cpe:2.3:a:nepxion:discovery:3.28.0
Nepxion » Discovery » Version: 3.28.1

cpe:2.3:a:nepxion:discovery:3.28.1
Nepxion » Discovery » Version: 3.30.0

cpe:2.3:a:nepxion:discovery:3.30.0
Nepxion » Discovery » Version: 3.31.0

cpe:2.3:a:nepxion:discovery:3.31.0
Nepxion » Discovery » Version: 3.32.0

cpe:2.3:a:nepxion:discovery:3.32.0
Nepxion » Discovery » Version: 3.33.1

cpe:2.3:a:nepxion:discovery:3.33.1
Nepxion » Discovery » Version: 3.33.2

cpe:2.3:a:nepxion:discovery:3.33.2
Nepxion » Discovery » Version: 3.8.1

cpe:2.3:a:nepxion:discovery:3.8.1
Nepxion » Discovery » Version: 3.8.13

cpe:2.3:a:nepxion:discovery:3.8.13
Nepxion » Discovery » Version: 3.8.2

cpe:2.3:a:nepxion:discovery:3.8.2
Nepxion » Discovery » Version: 3.8.3

cpe:2.3:a:nepxion:discovery:3.8.3
Nepxion » Discovery » Version: 3.8.5

cpe:2.3:a:nepxion:discovery:3.8.5
Nepxion » Discovery » Version: 3.8.6

cpe:2.3:a:nepxion:discovery:3.8.6
Nepxion » Discovery » Version: 3.8.7

cpe:2.3:a:nepxion:discovery:3.8.7
Nepxion » Discovery » Version: 3.9.0

cpe:2.3:a:nepxion:discovery:3.9.0
Nepxion » Discovery » Version: 3.9.2

cpe:2.3:a:nepxion:discovery:3.9.2
Nepxion » Discovery » Version: 4.10.0

cpe:2.3:a:nepxion:discovery:4.10.0
Nepxion » Discovery » Version: 4.10.1

cpe:2.3:a:nepxion:discovery:4.10.1
Nepxion » Discovery » Version: 4.10.3

cpe:2.3:a:nepxion:discovery:4.10.3
Nepxion » Discovery » Version: 4.10.7

cpe:2.3:a:nepxion:discovery:4.10.7
Nepxion » Discovery » Version: 4.11.0

cpe:2.3:a:nepxion:discovery:4.11.0
Nepxion » Discovery » Version: 4.11.3

cpe:2.3:a:nepxion:discovery:4.11.3
Nepxion » Discovery » Version: 4.11.9

cpe:2.3:a:nepxion:discovery:4.11.9
Nepxion » Discovery » Version: 4.12.0

cpe:2.3:a:nepxion:discovery:4.12.0
Nepxion » Discovery » Version: 4.12.2

cpe:2.3:a:nepxion:discovery:4.12.2
Nepxion » Discovery » Version: 4.13.0

cpe:2.3:a:nepxion:discovery:4.13.0
Nepxion » Discovery » Version: 4.13.11

cpe:2.3:a:nepxion:discovery:4.13.11
Nepxion » Discovery » Version: 4.13.13

cpe:2.3:a:nepxion:discovery:4.13.13
Nepxion » Discovery » Version: 4.13.2

cpe:2.3:a:nepxion:discovery:4.13.2
Nepxion » Discovery » Version: 4.13.3

cpe:2.3:a:nepxion:discovery:4.13.3
Nepxion » Discovery » Version: 4.13.5

cpe:2.3:a:nepxion:discovery:4.13.5
Nepxion » Discovery » Version: 4.13.8

cpe:2.3:a:nepxion:discovery:4.13.8
Nepxion » Discovery » Version: 4.15.0

cpe:2.3:a:nepxion:discovery:4.15.0
Nepxion » Discovery » Version: 4.8.1

cpe:2.3:a:nepxion:discovery:4.8.1
Nepxion » Discovery » Version: 4.8.13

cpe:2.3:a:nepxion:discovery:4.8.13
Nepxion » Discovery » Version: 4.8.2

cpe:2.3:a:nepxion:discovery:4.8.2
Nepxion » Discovery » Version: 4.8.3

cpe:2.3:a:nepxion:discovery:4.8.3
Nepxion » Discovery » Version: 4.8.5

cpe:2.3:a:nepxion:discovery:4.8.5
Nepxion » Discovery » Version: 4.8.6

cpe:2.3:a:nepxion:discovery:4.8.6
Nepxion » Discovery » Version: 4.8.7

cpe:2.3:a:nepxion:discovery:4.8.7
Nepxion » Discovery » Version: 4.9.0

cpe:2.3:a:nepxion:discovery:4.9.0
Nepxion » Discovery » Version: 4.9.2

cpe:2.3:a:nepxion:discovery:4.9.2
Nepxion » Discovery » Version: 5.0.0

cpe:2.3:a:nepxion:discovery:5.0.0
Nepxion » Discovery » Version: 5.0.1

cpe:2.3:a:nepxion:discovery:5.0.1
Nepxion » Discovery » Version: 5.0.8

cpe:2.3:a:nepxion:discovery:5.0.8
Nepxion » Discovery » Version: 5.1.0

cpe:2.3:a:nepxion:discovery:5.1.0
Nepxion » Discovery » Version: 5.1.2

cpe:2.3:a:nepxion:discovery:5.1.2
Nepxion » Discovery » Version: 5.2.0

cpe:2.3:a:nepxion:discovery:5.2.0
Nepxion » Discovery » Version: 5.2.1

cpe:2.3:a:nepxion:discovery:5.2.1
Nepxion » Discovery » Version: 5.2.3

cpe:2.3:a:nepxion:discovery:5.2.3
Nepxion » Discovery » Version: 5.2.7

cpe:2.3:a:nepxion:discovery:5.2.7
Nepxion » Discovery » Version: 5.3.0

cpe:2.3:a:nepxion:discovery:5.3.0
Nepxion » Discovery » Version: 5.3.3

cpe:2.3:a:nepxion:discovery:5.3.3
Nepxion » Discovery » Version: 5.3.9

cpe:2.3:a:nepxion:discovery:5.3.9
Nepxion » Discovery » Version: 5.4.0

cpe:2.3:a:nepxion:discovery:5.4.0
Nepxion » Discovery » Version: 5.4.2

cpe:2.3:a:nepxion:discovery:5.4.2
Nepxion » Discovery » Version: 5.5.0

cpe:2.3:a:nepxion:discovery:5.5.0
Nepxion » Discovery » Version: 5.5.11

cpe:2.3:a:nepxion:discovery:5.5.11
Nepxion » Discovery » Version: 5.5.13

cpe:2.3:a:nepxion:discovery:5.5.13
Nepxion » Discovery » Version: 5.5.2

cpe:2.3:a:nepxion:discovery:5.5.2
Nepxion » Discovery » Version: 5.5.3

cpe:2.3:a:nepxion:discovery:5.5.3
Nepxion » Discovery » Version: 5.5.5

cpe:2.3:a:nepxion:discovery:5.5.5
Nepxion » Discovery » Version: 5.5.8

cpe:2.3:a:nepxion:discovery:5.5.8
Nepxion » Discovery » Version: 5.6.0

cpe:2.3:a:nepxion:discovery:5.6.0
Nepxion » Discovery » Version: 6.0.1

cpe:2.3:a:nepxion:discovery:6.0.1
Nepxion » Discovery » Version: 6.0.2

cpe:2.3:a:nepxion:discovery:6.0.2
Nepxion » Discovery » Version: 6.0.5

cpe:2.3:a:nepxion:discovery:6.0.5
Nepxion » Discovery » Version: 6.0.6

cpe:2.3:a:nepxion:discovery:6.0.6
Nepxion » Discovery » Version: 6.0.7

cpe:2.3:a:nepxion:discovery:6.0.7
Nepxion » Discovery » Version: 6.10.0

cpe:2.3:a:nepxion:discovery:6.10.0
Nepxion » Discovery » Version: 6.11.0

cpe:2.3:a:nepxion:discovery:6.11.0
Nepxion » Discovery » Version: 6.12.0

cpe:2.3:a:nepxion:discovery:6.12.0
Nepxion » Discovery » Version: 6.12.1

cpe:2.3:a:nepxion:discovery:6.12.1
Nepxion » Discovery » Version: 6.13.1

cpe:2.3:a:nepxion:discovery:6.13.1
Nepxion » Discovery » Version: 6.14.0

cpe:2.3:a:nepxion:discovery:6.14.0
Nepxion » Discovery » Version: 6.15.0

cpe:2.3:a:nepxion:discovery:6.15.0
Nepxion » Discovery » Version: 6.16.1

cpe:2.3:a:nepxion:discovery:6.16.1
Nepxion » Discovery » Version: 6.16.2

cpe:2.3:a:nepxion:discovery:6.16.2
Nepxion » Discovery » Version: 6.2.0

cpe:2.3:a:nepxion:discovery:6.2.0
Nepxion » Discovery » Version: 6.3.1

cpe:2.3:a:nepxion:discovery:6.3.1
Nepxion » Discovery » Version: 6.3.2

cpe:2.3:a:nepxion:discovery:6.3.2
Nepxion » Discovery » Version: 6.3.3

cpe:2.3:a:nepxion:discovery:6.3.3
Nepxion » Discovery » Version: 6.5.0

cpe:2.3:a:nepxion:discovery:6.5.0
Nepxion » Discovery » Version: 6.6.0

cpe:2.3:a:nepxion:discovery:6.6.0
Nepxion » Discovery » Version: 6.7.0

cpe:2.3:a:nepxion:discovery:6.7.0
Nepxion » Discovery » Version: 6.8.0

cpe:2.3:a:nepxion:discovery:6.8.0
Nepxion » Discovery » Version: 6.9.0

cpe:2.3:a:nepxion:discovery:6.9.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-23463

Products

Pricing

Contact Us