Threat intelligence / Vulnerability
CVE-2022-22965
Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.
Vulnerability
TypeVulnerability
External ID—
First seen2022-04-04
Last seen2022-04-04
Confidence
—
Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.
Labels
CISA KEV context
Vendor / productVMware Spring Framework
Added2022-04-04
Due date2022-04-25
4 recorded
Relationships
2 external