CVE-2022-22947

LLM-synthesized narrative grounded in this CVE's description and references.

Versions sourced from the GitHub Security Advisory.

• Oracle Corporation/Commerce Guided Search

  cpe:2.3:a:oracle:commerce_guided_search:11.3.2:*:*:*:*:*:*:*
• Oracle Corporation/Communications Cloud Native Core Binding Support Function2 versions

  cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:1.11.0:*:*:*:*:*:*:*+ 1 more

  • cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:1.11.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.1.3:*:*:*:*:*:*:*
• Oracle Corporation/Communications Cloud Native Core Console

  cpe:2.3:a:oracle:communications_cloud_native_core_console:22.2.0:*:*:*:*:*:*:*
• Oracle Corporation/Communications Cloud Native Core Network Exposure Function

  cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:22.1.0:*:*:*:*:*:*:*
• Oracle Corporation/Communications Cloud Native Core Network Function Cloud Native Environment

  cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:1.10.0:*:*:*:*:*:*:*
• Oracle Corporation/Communications Cloud Native Core Network Repository Function4 versions

  cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:1.15.0:*:*:*:*:*:*:*+ 3 more

  • cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:1.15.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:1.15.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:22.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:22.2.0:*:*:*:*:*:*:*
• Oracle Corporation/Communications Cloud Native Core Network Slice Selection Function2 versions

  cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:1.8.0:*:*:*:*:*:*:*+ 1 more

  • cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:1.8.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:22.1.0:*:*:*:*:*:*:*
• Oracle Corporation/Communications Cloud Native Core Security Edge Protection Proxy

  cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:22.1.1:*:*:*:*:*:*:*
• Oracle Corporation/Communications Cloud Native Core Service Communication Proxy

  cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:1.15.0:*:*:*:*:*:*:*
• VMware/Spring Cloud Gateway2 versions

  cpe:2.3:a:vmware:spring_cloud_gateway:*:*:*:*:*:*:*:*+ 1 more

  • cpe:2.3:a:vmware:spring_cloud_gateway:*:*:*:*:*:*:*:*range: <3.0.7
  • cpe:2.3:a:vmware:spring_cloud_gateway:3.1.0:*:*:*:*:*:*:*
• Spring Cloud/Spring Cloud Gatewaycpe-rescue
• ghsa-coords

  pkg:maven/org.springframework.cloud/spring-cloud-gateway

  Range: < 3.0.7

• www.oracle.com/security-alerts/cpuapr2022.htmlnvdPatchThird Party AdvisoryWEB
• www.oracle.com/security-alerts/cpujul2022.htmlnvdPatchThird Party AdvisoryWEB
• packetstormsecurity.com/files/166219/Spring-Cloud-Gateway-3.1.0-Remote-Code-Execution.htmlnvdExploitThird Party AdvisoryVDB EntryWEB
• packetstormsecurity.com/files/168742/Spring-Cloud-Gateway-3.1.0-Remote-Code-Execution.htmlnvdExploitThird Party AdvisoryVDB EntryWEB
• github.com/advisories/GHSA-3gx9-37ww-9qw6ghsaADVISORY
• nvd.nist.gov/vuln/detail/CVE-2022-22947ghsaADVISORY
• tanzu.vmware.com/security/cve-2022-22947nvdMitigationVendor AdvisoryWEB
• www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

• New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes Tokens
  The Hacker News · Jul 17, 2026
• TuxBot v3: Inside an IoT Botnet Framework With LLM-Assisted Development
  Unit 42 · Jul 15, 2026