CVE:CVE-2022-22976
CNNVD:CNNVD-202205-3586
Spring Framework是美国Spring团队的一套开源的Java、JavaEE应用程序框架。该框架可帮助开发人员构建高质量的应用。
Spring Framework 存在输入验证错误漏洞，该漏洞源于整数溢出错误。
solution:Upgrade vmware spring_security to a higher version than 5.5.7,5.6.4,and avoid the version (,5.5.7),[5.6.0,5.6.4); Upgrade oracle financial_services_crime_and_compliance_management_studio to a higher version than 8.0.8.2.0,8.0.8.3.0,and avoid the version 8.0.8.2.0,8.0.8.3.0; Upgrade netapp active_iq_unified_manager to a higher version than -