Is CVE-2022-47937 actively exploited?

No active exploitation of CVE-2022-47937 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2022-47937 be exploited remotely?

Yes. CVE-2022-47937 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2022-47937?

CVE-2022-47937 has a CVSS score of 9.8 (CRITICAL).

HOME VULNERABILITIESCVE-2022-47937

CRITICAL

CVE-2022-47937

CWE-20Published: May 15, 2023· Updated: Jun 17, 2026

9.8

CVSS v3.1

Official Description

Improper input validation in the Apache Sling Commons JSON bundle allows an attacker to trigger unexpected errors by supplying specially-crafted input.

The org.apache.sling.commons.json bundle has been deprecated as of March

2017 and should not be used anymore. Consumers are encouraged to

consider the Apache Sling Commons Johnzon OSGi bundle provided by the

Apache Sling project, but may of course use other JSON libraries.

NVD Source

Risk Analysis

The deprecated Apache Sling Commons JSON bundle contains an input validation flaw that can be triggered by specially-crafted input. This critical vulnerability is rated 9.8 and can lead to unexpected errors and potential system compromise.

There is no known public exploit for this vulnerability, and it is not in the CISA KEV catalog. The flaw is remotely exploitable with low attack complexity.

Recommended Action

The component is deprecated and should be removed. Migrate to the Apache Sling Commons Johnzon OSGi bundle or an alternative JSON library.

Generated by the CTIWATCH analysis pipeline from this CVE's metadata (CVSS, EPSS, KEV status, exploit intelligence). Verify against vendor advisories before acting.

Technical Analysis

CVE-2022-47937 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 9.8.