sign in--:--:--UTC

CVE-2022-22965

exploited in the wild☆ pin

CVSS

—

Reports

5

First seen

Apr 1, 2022

Last seen

Jul 15, 2026

Affected product

Spring Framework

Associated actors

TuxBot operator ×1

Recent reports

TuxBot v3 Evolution: LLM-Assisted IoT Botnet With Functional Core but Broken Exploits

Palo Alto Unit 42Jul 15, 2026 High

Oracle Critical Patch Update: Multiple Vulnerabilities in Java and Oracle Products (April 2022)

GovCERT.HKApr 20, 2022 Critical

Spring Framework CVE-2022-22965 (Spring4shell) Remote Code Execution Vulnerability Advisory

NICS TaiwanApr 6, 2022 Critical

High Threat Security Alert: Remote Code Execution Vulnerability in VMware Products

GovCERT.HKApr 4, 2022 Critical

High Threat Security Alert: Multiple RCE Vulnerabilities in Spring Framework

GovCERT.HKApr 1, 2022

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans