sign in--:--:--UTC

CVE-2022-22965

exploited in the wild

CVSS

—

Reports

4

First seen

Apr 1

Last seen

Apr 20

Affected product

Spring Framework 5.3.0–5.3.17, 5.2.0–5.2.19; Spring Boot 2.5.x, 2.6.x

Recent reports

Oracle Critical Patch Update: Multiple Vulnerabilities in Java and Oracle Products (April 2022)

GovCERT.HKApr 20 Critical

Spring Framework CVE-2022-22965 (Spring4shell) Remote Code Execution Vulnerability Advisory

NICS TaiwanApr 6 Critical

High Threat Security Alert: Remote Code Execution Vulnerability in VMware Products

GovCERT.HKApr 4 Critical

High Threat Security Alert: Multiple RCE Vulnerabilities in Spring Framework

GovCERT.HKApr 1

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans