CVE-2025-3322
Description
An improper neutralization of inputs used in expression language allows remote code execution with the highest privileges on the server.
Is your site exposed to CVE-2025-3322?
Run a free security scan — no signup, results in seconds.
Weakness Type (CWE)
References
Other References
Frequently Asked Questions
What is CVE-2025-3322? +
How do I check if I'm vulnerable to CVE-2025-3322? +
Related Vulnerabilities
ACE vulnerability in JaninoEventEvaluator by QOS.CH logback-core upto including version 0.1 to 1.3.14 and 1.4.0 to 1.5.12 in Java applications …
Spring Cloud Gateway Server Webflux may be vulnerable to Spring Environment property modification. An application should be considered vulnerable when …
In plain terms, Apache Polaris is supposed to issue short-lived GCS credentials that only work for one table's files, but …
Improper neutralization of special elements used in an expression language statement ('expression language injection') vulnerability in Soagen Informatics Technologies Software …
Voltronic Power ViewPower Pro Expression Language Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code …
A critical Remote Code Execution (RCE) vulnerability was identified in the server-side template rendering mechanism used by the Glassfish gadget …