ESP dSeries Workload Automation

  • Private Community
 View Only
Back to discussions
Expand all | Collapse all

Spring4Shell ZERO-day exploit CVE-2022-22963 and CVE-2022-22965 vulnerability for CA Workload Automation DE (dSeries)

  • 1.  Spring4Shell ZERO-day exploit CVE-2022-22963 and CVE-2022-22965 vulnerability for CA Workload Automation DE (dSeries)

    Broadcom Employee
    Posted Apr 05, 2022 12:48 AM
    Edited by Ravi Kiran Kunduri Apr 05, 2022 01:58 AM

    Broadcom Agile Operations Software Security Advisory for Spring Framework CVE-2022-22965 Vulnerability can be found here -
    Support Content Notification - Support Portal - Broadcom support portal

    Product team has analyzed below vulnerabilities and sees that dSeries versions in the market is not affected.

    Vulnerability 1 : https://nvd.nist.gov/vuln/detail/CVE-2022-22950

    Vulnerability 2 : https://nvd.nist.gov/vuln/detail/CVE-2022-22965


    Agents versions in the market are not affected by this vulnerability.