CVE:CVE-2021-22118
CNNVD:CNNVD-202105-1663
Vmware Spring Framework是美国威睿（Vmware）公司的一套开源的Java、JavaEE应用程序框架。该框架可帮助开发人员构建高质量的应用。
Spring Framework 存在权限许可和访问控制问题漏洞，该漏洞允许攻击者绕过访问限制来读取或修改数据。
solution:Upgrade vmware spring_framework to a higher version than 5.2.15,5.3.7,and avoid the version [5.2.0,5.2.15),[5.3.0,5.3.7); Upgrade oracle commerce_guided_search to a higher version than 11.3.2,and avoid the version 11.3.2; Upgrade oracle communications_brm_-_elastic_charging_engine to a higher version than 12.0.0.3,and avoid the version 12.0.0.3; Upgrade oracle communications_cloud_native_core_binding_support_function to a higher version than 1.9.0,and avoid the version 1.9.0; Upgrade oracle communications_cloud_native_core_policy to a higher version than 1.14.0,and avoid the version 1.14.0; Upgrade oracle communications_cloud_native_core_security_edge_protection_proxy to a higher version than 1.6.0,and avoid the version 1.6.0; Upgrade oracle communications_cloud_native_core_service_communication_proxy to a higher version than 1.14.0,and avoid the version 1.14.0; Upgrade oracle communications_cloud_native_core_unified_data_repository to a higher version than 1.14.0,and avoid the version 1.14.0; Upgrade oracle communications_diameter_intelligence_hub to a higher version than 8.1.0,8.2.3,and avoid the version [8.0.0,8.1.0],[8.2.0,8.2.3]; Upgrade oracle communications_element_manager to a higher version than 8.2.4.0,and avoid the version [8.2.0,8.2.4.0]; Upgrade oracle communications_interactive_session_recorder to a higher version than 6.4,and avoid the version 6.4; Upgrade oracle communications_network_integrity to a higher version than 7.3.6,and avoid the version 7.3.6; Upgrade oracle communications_session_report_manager to a higher version than 8.2.4.0,and avoid the version [8.0.0,8.2.4.0]; Upgrade oracle communications_session_route_manager to a higher version than 8.2.4.0,and avoid the version [8.0.0,8.2.4.0]; Upgrade oracle communications_unified_inventory_management to a higher version than 7.4.1,7.4.2,7.5.0,and avoid the version 7.4.1,7.4.2,7.5.0; Upgrade oracle documaker to a higher version than 12.6.4,and avoid the version [12.6.0,12.6.4]; Upgrade oracle enterprise_data_quality to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle financial_services_analytical_applications_infrastructure to a higher version than 8.1.1,and avoid the version [8.0.8,8.1.1]; Upgrade oracle healthcare_data_repository to a higher version than 8.1.0,and avoid the version 8.1.0; Upgrade oracle insurance_policy_administration to a higher version than 11.3.1,and avoid the version [11.0,11.3.1]; Upgrade oracle insurance_rules_palette to a higher version than 11.0.2,11.1.0,11.2.7,11.3.0,11.3.1,and avoid the version 11.0.2,11.1.0,11.2.7,11.3.0,11.3.1; Upgrade oracle mysql_enterprise_monitor to a higher version than 8.0.25,and avoid the version (,8.0.25]; Upgrade oracle retail_assortment_planning to a higher version than 16.0,and avoid the version 16.0; Upgrade oracle retail_customer_management_and_segmentation_foundation to a higher version than 19.0,and avoid the version [16.0,19.0]; Upgrade oracle retail_financial_integration to a higher version than 14.1.3.2,15.0.3.1,16.0.3,and avoid the version 14.1.3.2,15.0.3.1,16.0.3; Upgrade oracle retail_integration_bus to a higher version than 14.1.3.2,15.0.3.1,16.0.3,and avoid the version 14.1.3.2,15.0.3.1,16.0.3; Upgrade oracle retail_merchandising_system to a higher version than 19.0.1,and avoid the version 19.0.1; Upgrade oracle retail_order_broker to a higher version than 16.0,and avoid the version 16.0; Upgrade oracle retail_predictive_application_server to a higher version than 14.1.3,15.0.3,16.0.3,and avoid the version 14.1.3,15.0.3,16.0.3; Upgrade oracle utilities_testing_accelerator to a higher version than 6.0.0.1.1,6.0.0.2.2,6.0.0.3.1,and avoid the version 6.0.0.1.1,6.0.0.2.2,6.0.0.3.1; Upgrade netapp hci to a higher version than -; Upgrade netapp management_services_for_element_software to a higher version than -