VDB
CVE-2022-25845
CVE-2022-25845
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Red Hat Fuse ist eine Open-Source-Integrationsplattform, die auf Apache Camel basiert.
EPSS 88.94% · 99.5th percentile
Risk Scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score
88.94%
99.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Enterprise Linux | |
| IBM | IBM QRadar SIEM 7.5 | |
| Debian | Debian Linux | |
| EMC | EMC Avamar | |
| IBM | IBM Spectrum Protect Plus 10.1 | |
| Red Hat | Red Hat FUSE <7.11.0 | |
| NetApp | NetApp ActiveIQ Unified Manager | |
| Red Hat | Red Hat JBoss Enterprise Application Platform <7.3.13 | |
| Atlassian | Atlassian Bitbucket <10.0.2 | |
| IBM | IBM QRadar SIEM 7.4 | |
| Atlassian | Atlassian Bitbucket <8.19.25 (LTS) | |
| Red Hat | Red Hat JBoss Enterprise Application Platform <7.1.10 | |
| IBM | IBM QRadar SIEM | |
| Hitachi | Hitachi Ops Center | |
| Atlassian | Atlassian Bitbucket <9.4.13 (LTS) |
Exploit Intelligence
- nerowander/CVE-2022-25845-exploit (github-poc-repo)
- nerowander/CVE-2022-25845-exploit (github-poc-repo)
- nerowander/CVE-2022-25845-exploit (github-poc-repo)
- nerowander/CVE-2022-25845-exploit (github-poc-repo)
- nerowander/CVE-2022-25845-exploit (github-poc-repo)
- nerowander/CVE-2022-25845-exploit (github-poc-repo)
- nerowander/CVE-2022-25845-exploit (github-poc-repo)
- a scenario based on CVE-2022-25845 yielding a TP for metadata based SCA but a FN if the callgraph is used (github-poc-repo)
- a scenario based on CVE-2022-25845 yielding a TP for metadata based SCA but a FN if the callgraph is used (github-poc-repo)
- a scenario based on CVE-2022-25845 yielding a TP for metadata based SCA but a FN if the callgraph is used (github-poc-repo)
…and 97 more exploits
Timeline
- Jun 10, 2022 CVE Published
- Jun 11, 2022 EPSS Score
- Jun 12, 2022 PoC Published
- Jun 16, 2022 PoC Published
- Jun 17, 2022 PoC Published
- Jun 17, 2022 PoC Published
- Jun 17, 2022 PoC Published
- Jun 25, 2022 PoC Published
- Sep 3, 2022 EPSS Score
- Sep 16, 2022 EPSS Score
- Oct 8, 2022 PoC Published
- Nov 23, 2022 PoC Published
References
- https://wid.cert-bund.de/.well-known/csaf/white/2022/wid-sec-w-2022-0607.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0607 advisory
- https://access.redhat.com/errata/RHSA-2022:5532 advisory
- https://access.redhat.com/errata/RHSA-2022:5596 advisory
- https://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2022-125/index.html advisory
- https://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2022-124/index.html advisory
- https://lists.debian.org/debian-security-announce/2022/msg00165.html advisory
- https://access.redhat.com/errata/RHSA-2022:5903 advisory
- https://access.redhat.com/errata/RHSA-2022:6787 advisory
- https://access.redhat.com/errata/RHSA-2022:6783 advisory
- https://access.redhat.com/errata/RHSA-2022:6782 advisory
- https://access.redhat.com/errata/RHSA-2022:6822 advisory
- https://access.redhat.com/errata/RHSA-2022:6823 advisory
- https://access.redhat.com/errata/RHSA-2022:6825 advisory
- https://access.redhat.com/errata/RHSA-2022:6821 advisory
- https://access.redhat.com/errata/RHSA-2022:6813 advisory
- https://access.redhat.com/errata/RHSA-2022:6835 advisory
- https://security.netapp.com/advisory/ntap-20221014-0006/ advisory
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-qradar-siem-is-vulnerable-to-using-components-with-known-vulnerabilities-14/ advisory
- https://access.redhat.com/errata/RHSA-2022:7177 advisory
…and 19 more