CyberSecBulletin

Nepxion vulnerabilities

We track 2 vulnerabilities in Nepxion products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 24, 2022.

2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score

Latest Nepxion vulnerabilities

  • 7.5 High severity

    Discovery: Server-Side Request Forgery

    CVE-2022-23464Nepxion

    Nepxion Discovery is a solution for Spring Cloud. Discovery is vulnerable to a potential Server-Side Request Forgery (SSRF). RouterResourceImpl uses RestTemplate’s getForEntity to retrieve the contents of a URL containing user-controlled input, potentially res

  • 9.8 Critical severity

    Discover: Improper Neutralization of Special Elements used in an Expression Language Statement

    CVE-2022-23463NepxionEPSS 2.26%

    Nepxion Discovery is a solution for Spring Cloud. Discover is vulnerable to SpEL Injection in discovery-commons. DiscoveryExpressionResolver’s eval method is evaluating expression with a StandardEvaluationContext, allowing the expression to reach and interact