CVE-2021-22060: Oracle Communications Cloud Native Core Console

Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days.

In Spring Framework versions 5.3.0 - 5.3.13, 5.2.0 - 5.2.18, and older unsupported versions, it is possible for a user to provide malicious input to cause the insertion of additional log entries. This is a follow-up to CVE-2021-22096 that protects against additional types of input and in more places of the Spring Framework codebase.

Affected products

• Oracle Communications Cloud Native Core Console: version 1.9.0 only
• Oracle Communications Cloud Native Core Service Communication Proxy: version 1.15.0 only
• VMware Spring Framework: from 5.2.0, up to and including 5.2.18; from 5.3.0, up to and including 5.3.13

Published 2022-01-10. Last modified 2026-06-17.