CVE-2022-2294 CISA KEV · Actively exploitedLinked to ransomware
Vulnerability in Google Chrome
CVSS score
8.8
EPSS probability
%70.8
Risk score
12.5
Published
4 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Technical report about CVE-2022-22947 in Spring Cloud Gateway and its exploitation through exposed Actuator endpoints.
Makefile Go / Python
Vulhub spring/CVE-2022-22947: Spring Cloud Gateway Actuator Code Injection (CVE-2022-22947), run with Isoloom
Makefile Go / Python
shoucheng3/spring-cloud__spring-cloud-gateway_CVE-2022-22947_3-0-6
Makefile Go / Python
Similar Vulnerabilities
10.0
CVE-2021-44228 Actively exploited
Improper input validation in Apache Log4j
S
Patch verified Public Exploits:22EPSS %100
10.0
CVE-2015-3306 Actively exploited
Improper access control in N/a
N
Workaround Public Exploits:5EPSS %99
9.8
CVE-2020-1938 Actively exploited
Vulnerability in Apache Tomcat
A
Patch verified Public Exploits:12EPSS %99
9.6
CVE-2023-4863 Actively exploited
libwebp: Heap buffer overflow in WebP Codec
RH
Partial patch Public Exploits:8EPSS %100
9.0
CVE-2021-40438 Actively exploited
mod_proxy SSRF
AS
Patch verified Public Exploits:11EPSS %100
7.5
CVE-2015-5477 Actively exploited
Vulnerability in N/a
N
Patch verified Public Exploits:2EPSS %99
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2022-2294"