VDB
CVE-2025-22233
CVE-2025-22233
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Das Spring Framework bietet ein Entwicklungsmodell für Java mit Infrastrukturunterstützung auf Anwendungsebene.
EPSS 0.44% · 36.4th percentile
Risk Scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.44%
36.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| VMware Tanzu | VMware Tanzu Spring Framework <6.1.20 | |
| HCL | HCL BigFix Service Management | |
| VMware Tanzu | VMware Tanzu Spring Framework <6.2.7 | |
| Dell | Dell NetWorker vCenter User Interface <19.14 | |
| VMware Tanzu | VMware Tanzu Spring Framework <6.0.28 | |
| VMware Tanzu | VMware Tanzu Spring Framework <5.3.43 | |
| RealObjects | RealObjects PDFreactor <12.2 | |
| Dell | Dell NetWorker Management Web UI <19.14 | |
| IBM | IBM Sterling Connect:Direct <6.4.0.3 | |
| Amazon | Amazon Linux 2 | |
| Hitachi | Hitachi Ops Center | |
| IBM | IBM Operational Decision Manager | |
| IBM | IBM Business Automation Workflow | |
| IBM | IBM InfoSphere Information Server | |
| Oracle | Oracle Commerce 11.4.0 | |
| Dell | Dell NetWorker REST API <19.14 | |
| Dell | Dell NetWorker Management Console <19.14 | |
| Dell | Dell NetWorker File-Level Recovery <19.14 | |
| NetApp | NetApp ActiveIQ Unified Manager | |
| IBM | IBM Sterling Connect:Direct <6.3.0.14 |
…and 1 more
Timeline
- May 15, 2025 CVE Published
- May 17, 2025 EPSS Score
- May 29, 2025 EPSS Score
- Jun 10, 2025 EPSS Score
- Jun 21, 2025 Coalition ESS Score
- Jun 22, 2025 EPSS Score
- Jul 5, 2025 EPSS Score
- Jul 17, 2025 EPSS Score
- Jul 29, 2025 EPSS Score
- Aug 10, 2025 EPSS Score
- Aug 22, 2025 EPSS Score
- Aug 22, 2025 Coalition ESS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2357.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2357 advisory
- https://www.oracle.com/security-alerts/cpuoct2025.html#AppendixOCOM advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0351.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0351 advisory
- https://www.dell.com/support/kbdoc/de-de/000425429/dsa-2026-023-security-update-for-dell-networker-multiple-third-party-component-vulnerabilities advisory
- https://www.dell.com/support/kbdoc/de-de/000425759/dsa-2026-024-security-update-for-dell-networker-multiple-third-party-component-vulnerabilities advisory
- https://alas.aws.amazon.com/AL2/ALAS2POSTGRESQL14-2026-025.html advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1077.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1077 advisory
- https://spring.io/security/cve-2025-22233 advisory
- https://spring.io/blog/2025/05/15/spring-framework-6-1-20-and-6-2-7-releases-fix-cve-2025-22233 advisory
- https://www.pdfreactor.com/pdfreactor-12-2-now-available/ advisory
- https://www.ibm.com/support/pages/node/7237748 advisory
- https://security.netapp.com/advisory/NTAP-20250704-0008 advisory
- https://support.hcl-software.com/community?id=community_blog&sys_id=d45b6a4b93636e901254f0cd1dba10f2 advisory
- https://www.ibm.com/support/pages/node/7246096 advisory
- https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2025-127/index.html advisory
- https://www.ibm.com/support/pages/node/7247442 advisory
- https://www.ibm.com/support/pages/node/7252567 advisory