CVE-2022-22971: Netapp Cloud Secure Agent

Medium severity, CVSS 6.5. EPSS: 3.2% chance of exploitation in the next 30 days.

In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebSocket endpoint is vulnerable to a denial of service attack by an authenticated user.

Affected products

• Netapp Cloud Secure Agent: affected versions not specified
• Netapp Oncommand Insight: affected versions not specified
• Oracle Financial Services Crime And Compliance Management Studio: version 8.0.8.2.0 only; version 8.0.8.3.0 only
• VMware Spring Framework: from 5.2.0, up to and including 5.2.21; from 5.3.0, up to and including 5.3.19

Published 2022-05-12. Last modified 2026-10-08.