CVE-2010-1622: Oracle Fusion Middleware

Medium severity, CVSS 6.0. EPSS: 52% chance of exploitation in the next 30 days.

SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote attackers to execute arbitrary code via an HTTP request containing class.classLoader.URLs[0]=jar: followed by a URL of a crafted .jar file.

Affected products

• Oracle Fusion Middleware: version 7.6.2 only; version 11.1.1.6.1 only; version 11.1.1.8.0 only
• Springsource Spring Framework: version 2.5.0 only; version 2.5.1 only; version 2.5.2 only; version 2.5.3 only; version 2.5.4 only; version 2.5.5 only; …

Published 2010-06-21. Last modified 2026-06-16.