CVE-2022-22965 VMware Spring Framework
Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.
- CVSS
- not scored
On CISA’s exploited list
Spring Framework JDK 9+ Remote Code Execution Vulnerability
- Added
- 2022-04-04
- Federal patch deadline
- 2022-04-25
- Ransomware use
- not known