CVE-2026-70922

概要

参考情報

• oracle.com/security-alerts/cspuaug2026.html · Vendor Advisory

financial services enterprise case management のその他の脆弱性

• CVE-2022-22965緊急 9.8悪用確認済み（CISA KEV）A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific…
• CVE-2022-22963緊急 9.8悪用確認済み（CISA KEV）In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to…
• CVE-2020-36518高 7.5jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.
• CVE-2022-23437中 6.5There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This cause…
• CVE-2021-38153中 5.9Some components in Apache Kafka use `Arrays.equals` to validate a password or key, which is vulnerable to timing attacks that make brute for…