[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fz46uwYdb3OiP8fvJG2YYPQwK5zyWSVPs3FpEkYFGXx8":3,"g5a-risk:CVE-2022-43916":118},{"success":4,"data":5,"meta":115},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":29,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":55,"references":56,"referencesCount":62,"weaknesses":63,"weaknessesCount":62,"isActivelyExploited":54,"cisaInfo":29,"otxData":29,"relatedBlogPosts":72,"seoMetadata":73,"configurations":98,"relatedVendorCves":113,"notableEvents":114},"CVE-2022-43916","What is CVE-2022-43916?","IBM App Connect Enterprise Certified Container 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6, and 12.7 Pods do not restrict network egress for Pods that are used for internal infrastructure.","IBM App Connect Enterprise Certified Container 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2...","2025-01-30T12:15:26.867","2025-08-13T17:50:14.573",9.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":38,"CVSSMetricV2":39,"CVSSMetricV40":29},[16,32],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":30,"ImpactScore":31},"psirt@us.ibm.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.1","CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N","NETWORK","HIGH","LOW","NONE","UNCHANGED",6.8,"MEDIUM",null,1.6,5.2,{"Source":33,"Type":34,"CVSSData":35,"ExploitabilityScore":37,"ImpactScore":31},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":24,"PrivilegesRequired":25,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":36,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"CRITICAL",3.9,[],[],0.00265,[40,40,40,40,40,40,40],"Critical",[44,49],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"ibm","app_connect_enterprise_certified_container","*","cpe:2.3:a:ibm:app_connect_enterprise_certified_container:*:*:*:*:*:*:*:*",{"vendor":50,"product":51,"version":52,"criteria":53,"vulnerable":54},"redhat","openshift","-","cpe:2.3:o:redhat:openshift:-:*:*:*:*:*:*:*",false,2,[57],{"url":58,"source":59,"tags":60},"https:\u002F\u002Fwww.ibm.com\u002Fsupport\u002Fpages\u002Fnode\u002F7181916","Ibm",[61],"Vendor Advisory",1,[64],{"id":65,"name":66,"description":67,"extendedDescription":68,"status":69,"abstraction":70,"structure":71},"CWE-923","Improper Restriction of Communication Channel to Intended Endpoints","The product establishes a communication channel to (or from) an endpoint for privileged or protected operations, but it does not properly ensure that it is communicating with the correct endpoint.","Attackers might be able to spoof the intended endpoint from a different system or process, thus gaining the same level of access as the intended endpoint.\nWhile this issue frequently involves authentication between network-based clients and servers, other types of communication channels and endpoints can have this weakness.","Incomplete","Class","Simple",[],{"title":74,"metaDescription":75,"keywords":76,"canonicalUrl":77,"structuredData":78},"What is CVE-2022-43916? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2022-43916, a critical severity cyber security vulnerability from 2025. IBM App Connect Enterprise Certified Container 7.1, 7.2...","CVE-2022-43916, CVE-2022-43916 vulnerability, CVE-2022-43916 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, ibm security, redhat security, app_connect_enterprise_certified_container vulnerability, openshift vulnerability","\u002Fwhat-is\u002Fcve-2022-43916",{"@context":79,"@type":80,"headline":74,"description":75,"datePublished":10,"dateModified":11,"author":81,"publisher":85,"about":89,"mainEntityOfPage":93,"articleSection":96,"keywords":97},"https:\u002F\u002Fschema.org","TechArticle",{"@type":82,"name":83,"url":84},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":82,"name":83,"url":84,"logo":86},{"@type":87,"url":88},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":90,"name":6,"description":91,"additionalType":92},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":94,"@id":95},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2022-43916","Cybersecurity","CVE-2022-43916, CVE-2022-43916 vulnerability, CVE-2022-43916 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[99],{"Operator":100,"Negate":29,"Nodes":101},"AND",[102,109],{"Operator":103,"Negate":54,"CPEMatch":104},"OR",[105],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":106,"VersionStartExcluding":29,"VersionStartIncluding":107,"VersionEndExcluding":108,"VersionEndIncluding":29},"ED569712-C3BF-4164-92F0-46A2ADCFB16E","7.1","12.8",{"Operator":103,"Negate":54,"CPEMatch":110},[111],{"Vulnerable":54,"Criteria":53,"MatchCriteriaID":112,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"22EB28CE-7C7F-4290-85FE-5E3EBF905CF0",[],[],{"lastModified":11,"cacheTime":116,"version":117},1793219232333,"2.0",{"score":119,"band":120,"action":121,"scoredAt":122},54,"Medium","Plan remediation","2026-07-01T10:35:08.677494+00:00"]