[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fxJcCjUFwmo5C1rewnVYPbm9zl5HM5tfR0muKhULD5u4":3,"g5a-risk:CVE-2022-22946":150},{"success":4,"data":5,"meta":148},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":27,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":71,"references":72,"referencesCount":84,"weaknesses":85,"weaknessesCount":94,"isActivelyExploited":95,"cisaInfo":27,"otxData":27,"relatedBlogPosts":96,"seoMetadata":97,"configurations":122,"relatedVendorCves":146,"notableEvents":147},"CVE-2022-22946","What is CVE-2022-22946?","In spring cloud gateway versions prior to 3.1.1+ , applications that are configured to enable HTTP2 and no key store or trusted certificates are set will be configured to use an insecure TrustManager. This makes the gateway able to connect to remote services with invalid or custom certificates.","In spring cloud gateway versions prior to 3.1.1+ , applications that are configured to enable HTTP2 and no key store or trusted certificates are set will be ...","2022-03-04T16:15:10.377","2023-02-22T17:46:02.053",5.5,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH","MEDIUM",null,1.8,3.6,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":22,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":35,"AvailabilityImpact":23,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:N\u002FI:P\u002FA:N","PARTIAL",2.1,3.9,2.9,0.04846,[39,39,39,39,39,39,39],"Medium",[43,48,53,57,61,65,67],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"vmware","spring_cloud_gateway","3.1.0","cpe:2.3:a:vmware:spring_cloud_gateway:3.1.0:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"oracle","commerce_guided_search","11.3.2","cpe:2.3:a:oracle:commerce_guided_search:11.3.2:*:*:*:*:*:*:*",{"vendor":49,"product":54,"version":55,"criteria":56,"vulnerable":4},"communications_cloud_native_core_binding_support_function","22.1.3","cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.1.3:*:*:*:*:*:*:*",{"vendor":49,"product":58,"version":59,"criteria":60,"vulnerable":4},"communications_cloud_native_core_console","22.2.0","cpe:2.3:a:oracle:communications_cloud_native_core_console:22.2.0:*:*:*:*:*:*:*",{"vendor":49,"product":62,"version":63,"criteria":64,"vulnerable":4},"communications_cloud_native_core_network_repository_function","22.1.2","cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:22.1.2:*:*:*:*:*:*:*",{"vendor":49,"product":62,"version":59,"criteria":66,"vulnerable":4},"cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:22.2.0:*:*:*:*:*:*:*",{"vendor":49,"product":68,"version":69,"criteria":70,"vulnerable":4},"communications_cloud_native_core_security_edge_protection_proxy","22.1.1","cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:22.1.1:*:*:*:*:*:*:*",7,[73,78],{"url":74,"source":75,"tags":76},"https:\u002F\u002Ftanzu.vmware.com\u002Fsecurity\u002Fcve-2022-22946","Vmware",[77],"Vendor Advisory",{"url":79,"source":80,"tags":81},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpujul2022.html","Oracle",[82,83],"Patch","Third Party Advisory",2,[86],{"id":87,"name":88,"description":89,"extendedDescription":90,"status":91,"abstraction":92,"structure":93},"CWE-295","Improper Certificate Validation","The product does not validate, or incorrectly validates, a certificate.","When a certificate is invalid or malicious, it might allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. The product might connect to a malicious host while believing it is a trusted host, or the product might be deceived into accepting spoofed data that appears to originate from a trusted host.","Draft","Base","Simple",1,false,[],{"title":98,"metaDescription":99,"keywords":100,"canonicalUrl":101,"structuredData":102},"What is CVE-2022-22946? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-22946, a medium severity cyber security vulnerability from 2022. In spring cloud gateway versions prior to 3.1.1+ , applic...","CVE-2022-22946, CVE-2022-22946 vulnerability, CVE-2022-22946 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, vmware security, oracle security, spring_cloud_gateway vulnerability, commerce_guided_search vulnerability, communications_cloud_native_core_binding_support_function vulnerability, communications_cloud_native_core_console vulnerability, communications_cloud_native_core_network_repository_function vulnerability","\u002Fwhat-is\u002Fcve-2022-22946",{"@context":103,"@type":104,"headline":98,"description":99,"datePublished":10,"dateModified":11,"author":105,"publisher":109,"about":113,"mainEntityOfPage":117,"articleSection":120,"keywords":121},"https:\u002F\u002Fschema.org","TechArticle",{"@type":106,"name":107,"url":108},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":106,"name":107,"url":108,"logo":110},{"@type":111,"url":112},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":114,"name":6,"description":115,"additionalType":116},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":118,"@id":119},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-22946","Cybersecurity","CVE-2022-22946, CVE-2022-22946 vulnerability, CVE-2022-22946 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[123,130],{"Operator":27,"Negate":27,"Nodes":124},[125],{"Operator":126,"Negate":27,"CPEMatch":127},"OR",[128],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":129,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"71D24F3E-9DA8-491B-841F-BDF95B8000B0",{"Operator":27,"Negate":27,"Nodes":131},[132],{"Operator":126,"Negate":27,"CPEMatch":133},[134,136,138,140,142,144],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":135,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"2A3622F5-5976-4BBC-A147-FC8A6431EA79",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":137,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"6EDB6772-7FDB-45FF-8D72-952902A7EE56",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":139,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"3C2BC68D-C8B2-4C8B-9426-21F00CBDD873",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":141,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A264E0DE-209D-49B1-8B26-51AB8BBC97F1",{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":143,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"EBB5FF32-7362-4A1E-AD24-EF6B8770FCAD",{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":145,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"8B40FAF9-0A6B-41C4-8CAD-D3D1DD982C2C",[],[],{"lastModified":11,"cacheTime":149,"version":33},1792368451415,{"score":151,"band":152,"action":153,"scoredAt":154},21,"Low","Monitor","2026-10-16T06:53:44.348408+00:00"]