TERASOLUNA Global Framework 1.0.0 (Public review version) and TERASOLUNA Server...

0 CVSS

Vulnerability Description

TERASOLUNA Global Framework 1.0.0 (Public review version) and TERASOLUNA Server Framework for Java (Rich) 2.0.0.2 to 2.0.5.1 are vulnerable to a ClassLoader manipulation vulnerability due to using the old version of Spring Framework which contains the vulnerability.The vulnerability is caused by an improper input validation issue in the binding mechanism of Spring MVC. By the application processing a specially crafted file, arbitrary code may be executed with the privileges of the application.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-43484

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

Affected Vendor

NTT DATA Corporation

View all reports →

Affected Software

TERASOLUNA Global Framework and TERASOLUNA Server Framework for Java (Rich)

Vulnerable Versions:

TERASOLUNA Global Framework 1.0.0 (Public review version) and TERASOLUNA Server Framework for Java (Rich) 2.0.0.2 to 2.0.5.1

Timeline

Official Publish: December 5th, 2022

Last Modified: April 24th, 2025

Added to House: July 21st, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.