CVEs published in April 2022
12 tracked CVEs from 7 vendors had their first vendor advisory published in April 2022: 2 critical, 6 high. Newest first.
2 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
Intercept X: insecure data storage vulnerability
Sophos · 1 advisory - Added
CVE-2021-23055Medium
On version 2.x before 2.0.3 and 1.x before 1.12.3, the command line restriction that controls snippet use with NGINX Ingress…
F5 · 1 advisory - Added
CVE-2022-26133Critical
SharedSecretClusterAuthenticator in Atlassian Bitbucket Data Center versions 5.14.0 and later before 7.6.14, 7.7.0 and later…
Atlassian · 1 advisory - Added
CVE-2022-0540Critical
Jira Service Management: vulnerability in Jira Seraph
Atlassian · 1 advisory - Added
CVE-2022-27223High
NetApp · 1 advisory - Added
CVE-2022-26966High
NetApp · 1 advisory - Added
CVE-2022-24545High
Windows Kerberos Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2022-24486High
Windows Kerberos Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2022-22968Unrated
In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions, the patterns for disallowedFields on a DataBinder are case sensitive which means a field is not effectively protected unless it is listed with both upper and lower case for the first character of the field, including upper and lower case for the first character of all nested fields within the property path
VMware · 1 advisory - Added
CVE-2021-39114High
Confluence Data Center: Affected versions of Atlassian Confluence Server and Data Center
Atlassian · 1 advisory - Added
CVE-2022-22950Unrated
n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition
VMware · 1 advisory - Added
CVE-2022-0778High
Vulnerability in OpenSSL library
Fortinet · 1 advisory