[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fNkE6QoLFpqym1Q5P_qv6p1rK9F1D1NFBTVkYJrZyHjU":3,"g5a-risk:CVE-2022-22969":123},{"success":4,"data":5,"meta":121},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":27,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":54,"references":55,"referencesCount":54,"weaknesses":67,"weaknessesCount":71,"isActivelyExploited":72,"cisaInfo":27,"otxData":27,"relatedBlogPosts":73,"seoMetadata":74,"configurations":99,"relatedVendorCves":119,"notableEvents":120},"CVE-2022-22969","What is CVE-2022-22969?","Spring Security OAuth versions 2.5.x prior to 2.5.2 and older unsupported versions are susceptible to a Denial-of-Service (DoS) attack via the initiation of the Authorization Request in an OAuth 2.0 Client application. A malicious user or attacker can send multiple requests initiating the Authorization Request for the Authorization Code Grant, which has the potential of exhausting system resources using a single session. This vulnerability exposes OAuth 2.0 Client applications only.","Spring Security OAuth versions 2.5.x prior to 2.5.2 and older unsupported versions are susceptible to a Denial-of-Service (DoS) attack via the initiation of ...","2022-04-21T19:15:08.903","2024-10-10T19:13:58.31",6.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","MEDIUM",null,2.8,3.6,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":26,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":35,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":36,"BaseScore":37,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:N\u002FI:N\u002FA:P","SINGLE","PARTIAL",4,8,2.9,0.01253,[40,40,40,40,40,40,40],"Medium",[44,49],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"pivotal","spring_security_oauth","*","cpe:2.3:a:pivotal:spring_security_oauth:*:*:*:*:*:*:*:*",{"vendor":50,"product":51,"version":52,"criteria":53,"vulnerable":4},"oracle","communications_design_studio","7.4.2","cpe:2.3:a:oracle:communications_design_studio:7.4.2:*:*:*:*:*:*:*",2,[56,61],{"url":57,"source":58,"tags":59},"https:\u002F\u002Ftanzu.vmware.com\u002Fsecurity\u002Fcve-2022-22969","Vmware",[60],"Vendor Advisory",{"url":62,"source":63,"tags":64},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpujul2022.html","Oracle",[65,66],"Patch","Third Party Advisory",[68],{"id":69,"name":69,"description":70},"Unknown","NVD-CWE-noinfo",1,false,[],{"title":75,"metaDescription":76,"keywords":77,"canonicalUrl":78,"structuredData":79},"What is CVE-2022-22969? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-22969, a medium severity cyber security vulnerability from 2022. Spring Security OAuth versions 2.5.x prior to 2.5.2 and o...","CVE-2022-22969, CVE-2022-22969 vulnerability, CVE-2022-22969 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, pivotal security, oracle security, spring_security_oauth vulnerability, communications_design_studio vulnerability","\u002Fwhat-is\u002Fcve-2022-22969",{"@context":80,"@type":81,"headline":75,"description":76,"datePublished":10,"dateModified":11,"author":82,"publisher":86,"about":90,"mainEntityOfPage":94,"articleSection":97,"keywords":98},"https:\u002F\u002Fschema.org","TechArticle",{"@type":83,"name":84,"url":85},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":83,"name":84,"url":85,"logo":87},{"@type":88,"url":89},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":91,"name":6,"description":92,"additionalType":93},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":95,"@id":96},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-22969","Cybersecurity","CVE-2022-22969, CVE-2022-22969 vulnerability, CVE-2022-22969 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[100,113],{"Operator":27,"Negate":27,"Nodes":101},[102],{"Operator":103,"Negate":27,"CPEMatch":104},"OR",[105,109],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":106,"VersionStartExcluding":27,"VersionStartIncluding":107,"VersionEndExcluding":108,"VersionEndIncluding":27},"A137BE31-252D-4B38-8C9C-E4CA2030FDB1","2.4.0","2.4.2",{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":110,"VersionStartExcluding":27,"VersionStartIncluding":111,"VersionEndExcluding":112,"VersionEndIncluding":27},"2DB30D32-D606-4F64-9BDE-E78F4C8A2132","2.5.0","2.5.2",{"Operator":27,"Negate":27,"Nodes":114},[115],{"Operator":103,"Negate":27,"CPEMatch":116},[117],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":118,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A67AA54B-258D-4D09-9ACB-4085E0B3E585",[],[],{"lastModified":11,"cacheTime":122,"version":33},1792364714964,{"score":124,"band":125,"action":126,"scoredAt":127},32,"Low","Monitor","2026-10-16T06:54:16.081508+00:00"]