{"schemaVersion":3,"id":"CVE-2022-22965","aliases":["UBUNTU-CVE-2022-22965","USN-7165-1","DEBIAN-CVE-2022-22965","GHSA-36p3-wjmg-h94x"],"status":"published","duplicateOf":null,"title":"Spring Framework JDK 9+ Remote Code Execution Vulnerability","description":"A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.","dates":{"published":"2022-04-01T22:17:30.000Z","modified":"2025-10-21T23:15:42.792Z","reserved":null,"kevAdded":["2022-04-04T00:00:00.000Z"],"kevDue":["2022-04-25T00:00:00.000Z"]},"cvss":{"headline":{"score":9.8,"severity":"critical","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":10,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":10,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Maven","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H","exploitability":10,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":7.5,"severity":"high","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.99638,"percentile":0.9995,"severity":"critical","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.99638},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.99638,"percentile":0.9995}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.99638,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.99638,"percentile":0.9995}]},"kev":{"state":"listed","entries":[{"source":"cisa","sourceLabel":"CISA","dateAdded":"2022-04-04T00:00:00.000Z","dueDate":"2022-04-25T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions.","name":"Spring Framework JDK 9+ Remote Code Execution Vulnerability","description":"Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.","notes":[{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2022-22965","label":"nvd.nist.gov/vuln/detail/CVE-2022-22965"}],"vendor":"VMware","product":"Spring Framework","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}],"listedCount":1,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":true,"entry":{"source":"cisa","sourceLabel":"CISA","dateAdded":"2022-04-04T00:00:00.000Z","dueDate":"2022-04-25T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions.","name":"Spring Framework JDK 9+ Remote Code Execution Vulnerability","description":"Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.","notes":[{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2022-22965","label":"nvd.nist.gov/vuln/detail/CVE-2022-22965"}],"vendor":"VMware","product":"Spring Framework","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_F2C49E188D5566E3","name":"Exploit Reference (packetstormsecurity.com)","source":"reference","url":"http://packetstormsecurity.com/files/166713/Spring4Shell-Code-Execution.html","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"MSF_EXPLOIT_MULTI_HTTP_SPRING_FRAMEWORK_RCE_SPRING4SHELL","name":"Spring Framework Class property RCE (Spring4Shell)","source":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploit/multi/http/spring_framework_rce_spring4shell.rb","maturity":"poc","reliabilityScore":0,"verified":false,"type":"remote","platforms":[],"requiresAuth":false,"exploitdb":null,"metasploit":{"fullname":"exploit/multi/http/spring_framework_rce_spring4shell","rank":"0","rankName":"manual","postAuth":false,"check":true,"stability":["crash-safe"],"sideEffects":["ioc-in-logs","artifacts-on-disk"],"reliability":["repeatable-session"]}}],"exploitCount":2,"weaknesses":[{"id":"CWE-94","name":"Improper Control of Generation of Code ('Code Injection')","description":"The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/94.html"}],"affected":[{"vendor":"cisco","product":"cx_cloud_agent","name":"cx cloud agent","label":"cx_cloud_agent","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 2.1.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.1.0","eol":null,"hubHref":"/vendor/cisco/cx_cloud_agent"},{"vendor":"debian","product":"libspring-java","name":"libspring-java","label":"libspring-java","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/libspring-java","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"libspring-java","name":"libspring-java","label":"libspring-java","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/libspring-java","purlType":"deb","versions":[{"text":"< 4.3.30-2ubuntu1","noFixRecorded":false,"fixedIn":null},{"text":"< 4.3.22-1~18.04.1~esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 4.3.22-4ubuntu0.1~esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 4.3.30-1ubuntu0.1~esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 4.3.30-2ubuntu0.24.04.1~esm1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.30-2ubuntu1 | < 4.3.22-1~18.04.1~esm1 | < 4.3.22-4ubuntu0.1~esm1 | < 4.3.30-1ubuntu0.1~esm1 | < 4.3.30-2ubuntu0.24.04.1~esm1","eol":null,"hubHref":null},{"vendor":"org.springframework","product":"spring-beans","name":"org.springframework:spring-beans","label":"spring-beans","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.springframework/spring-beans","purlType":"maven","versions":[{"text":"< 5.2.20.RELEASE","noFixRecorded":false,"fixedIn":null},{"text":"≥ 5.3.0, < 5.3.18","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.2.20.RELEASE | ≥ 5.3.0, < 5.3.18","eol":{"isEol":null,"eolDate":null,"matchMethod":"purl","cycle":null,"product":{"name":"spring-framework","label":"Spring Framework","category":"framework"}},"hubHref":null},{"vendor":"org.springframework","product":"spring-webflux","name":"org.springframework:spring-webflux","label":"spring-webflux","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.springframework/spring-webflux","purlType":"maven","versions":[{"text":"< 5.2.20.RELEASE","noFixRecorded":false,"fixedIn":null},{"text":"≥ 5.3.0, < 5.3.18","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.2.20.RELEASE | ≥ 5.3.0, < 5.3.18","eol":null,"hubHref":null},{"vendor":"org.springframework","product":"spring-webmvc","name":"org.springframework:spring-webmvc","label":"spring-webmvc","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.springframework/spring-webmvc","purlType":"maven","versions":[{"text":"< 5.2.20.RELEASE","noFixRecorded":false,"fixedIn":null},{"text":"≥ 5.3.0, < 5.3.18","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.2.20.RELEASE | ≥ 5.3.0, < 5.3.18","eol":{"isEol":null,"eolDate":null,"matchMethod":"purl","cycle":null,"product":{"name":"spring-framework","label":"Spring Framework","category":"framework"}},"hubHref":null},{"vendor":"org.springframework.boot","product":"spring-boot-starter-web","name":"org.springframework.boot:spring-boot-starter-web","label":"spring-boot-starter-web","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.springframework.boot/spring-boot-starter-web","purlType":"maven","versions":[{"text":"< 2.5.12","noFixRecorded":false,"fixedIn":null},{"text":"≥ 2.6.0, < 2.6.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.5.12 | ≥ 2.6.0, < 2.6.6","eol":{"isEol":null,"eolDate":null,"matchMethod":"purl","cycle":null,"product":{"name":"spring-boot","label":"Spring Boot","category":"framework"}},"hubHref":null},{"vendor":"org.springframework.boot","product":"spring-boot-starter-webflux","name":"org.springframework.boot:spring-boot-starter-webflux","label":"spring-boot-starter-webflux","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.springframework.boot/spring-boot-starter-webflux","purlType":"maven","versions":[{"text":"< 2.5.12","noFixRecorded":false,"fixedIn":null},{"text":"≥ 2.6.0, < 2.6.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.5.12 | ≥ 2.6.0, < 2.6.6","eol":{"isEol":null,"eolDate":null,"matchMethod":"purl","cycle":null,"product":{"name":"spring-boot","label":"Spring Boot","category":"framework"}},"hubHref":null},{"vendor":"oracle","product":"commerce_platform","name":"commerce platform","label":"commerce_platform","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"11.3.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"11.3.2","eol":null,"hubHref":"/vendor/oracle/commerce_platform"},{"vendor":"oracle","product":"communications_cloud_native_core_automated_test_suite","name":"communications cloud native core automated test suite","label":"communications_cloud_native_core_automated_test_suite","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.9.0","noFixRecorded":false,"fixedIn":null},{"text":"22.1.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.9.0 | 22.1.0","eol":null,"hubHref":"/vendor/oracle/communications_cloud_native_core_automated_test_suite"},{"vendor":"oracle","product":"communications_cloud_native_core_binding_support_function","name":"communications cloud native core binding support function","label":"communications_cloud_native_core_binding_support_function","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"22.1.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"22.1.3","eol":null,"hubHref":"/vendor/oracle/communications_cloud_native_core_binding_support_function"},{"vendor":"oracle","product":"communications_cloud_native_core_console","name":"communications cloud native core console","label":"communications_cloud_native_core_console","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.9.0","noFixRecorded":false,"fixedIn":null},{"text":"22.1.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.9.0 | 22.1.0","eol":null,"hubHref":"/vendor/oracle/communications_cloud_native_core_console"},{"vendor":"oracle","product":"communications_cloud_native_core_network_exposure_function","name":"communications cloud native core network exposure function","label":"communications_cloud_native_core_network_exposure_function","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"22.1.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"22.1.0","eol":null,"hubHref":"/vendor/oracle/communications_cloud_native_core_network_exposure_function"},{"vendor":"oracle","product":"communications_cloud_native_core_network_function_cloud_native_environment","name":"communications cloud native core network function cloud native environment","label":"communications_cloud_native_core_network_function_cloud_native_environment","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.10.0","noFixRecorded":false,"fixedIn":null},{"text":"22.1.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.10.0 | 22.1.0","eol":null,"hubHref":"/vendor/oracle/communications_cloud_native_core_network_function_cloud_native_environment"},{"vendor":"oracle","product":"communications_cloud_native_core_network_repository_function","name":"communications cloud native core network repository function","label":"communications_cloud_native_core_network_repository_function","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.15.0","noFixRecorded":false,"fixedIn":null},{"text":"22.1.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.15.0 | 22.1.0","eol":null,"hubHref":"/vendor/oracle/communications_cloud_native_core_network_repository_function"},{"vendor":"oracle","product":"communications_cloud_native_core_network_slice_selection_function","name":"communications cloud native core network slice selection function","label":"communications_cloud_native_core_network_slice_selection_function","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.8.0","noFixRecorded":false,"fixedIn":null},{"text":"1.15.0","noFixRecorded":false,"fixedIn":null},{"text":"22.1.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.8.0 | 1.15.0 | 22.1.0","eol":null,"hubHref":"/vendor/oracle/communications_cloud_native_core_network_slice_selection_function"},{"vendor":"oracle","product":"communications_cloud_native_core_policy","name":"communications cloud native core policy","label":"communications_cloud_native_core_policy","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.15.0","noFixRecorded":false,"fixedIn":null},{"text":"22.1.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.15.0 | 22.1.0","eol":null,"hubHref":"/vendor/oracle/communications_cloud_native_core_policy"},{"vendor":"oracle","product":"communications_cloud_native_core_security_edge_protection_proxy","name":"communications cloud native core security edge protection proxy","label":"communications_cloud_native_core_security_edge_protection_proxy","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.7.0","noFixRecorded":false,"fixedIn":null},{"text":"22.1.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.7.0 | 22.1.0","eol":null,"hubHref":"/vendor/oracle/communications_cloud_native_core_security_edge_protection_proxy"},{"vendor":"oracle","product":"communications_cloud_native_core_unified_data_repository","name":"communications cloud native core unified data repository","label":"communications_cloud_native_core_unified_data_repository","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.15.0","noFixRecorded":false,"fixedIn":null},{"text":"22.1.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.15.0 | 22.1.0","eol":null,"hubHref":"/vendor/oracle/communications_cloud_native_core_unified_data_repository"},{"vendor":"oracle","product":"communications_policy_management","name":"communications policy management","label":"communications_policy_management","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"12.6.0.0.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"12.6.0.0.0","eol":null,"hubHref":"/vendor/oracle/communications_policy_management"},{"vendor":"oracle","product":"communications_unified_inventory_management","name":"communications unified inventory management","label":"communications_unified_inventory_management","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"7.4.1","noFixRecorded":false,"fixedIn":null},{"text":"7.4.2","noFixRecorded":false,"fixedIn":null},{"text":"7.5.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.4.1 | 7.4.2 | 7.5.0","eol":null,"hubHref":"/vendor/oracle/communications_unified_inventory_management"},{"vendor":"oracle","product":"financial_services_analytical_applications_infrastructure","name":"financial services analytical applications infrastructure","label":"financial_services_analytical_applications_infrastructure","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"8.1.1","noFixRecorded":false,"fixedIn":null},{"text":"8.1.2.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"8.1.1 | 8.1.2.0","eol":null,"hubHref":"/vendor/oracle/financial_services_analytical_applications_infrastructure"},{"vendor":"oracle","product":"financial_services_behavior_detection_platform","name":"financial services behavior detection platform","label":"financial_services_behavior_detection_platform","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"8.1.1.0","noFixRecorded":false,"fixedIn":null},{"text":"8.1.1.1","noFixRecorded":false,"fixedIn":null},{"text":"8.1.2.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"8.1.1.0 | 8.1.1.1 | 8.1.2.0","eol":null,"hubHref":"/vendor/oracle/financial_services_behavior_detection_platform"},{"vendor":"oracle","product":"financial_services_enterprise_case_management","name":"financial services enterprise case management","label":"financial_services_enterprise_case_management","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"8.1.1.0","noFixRecorded":false,"fixedIn":null},{"text":"8.1.1.1","noFixRecorded":false,"fixedIn":null},{"text":"8.1.2.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"8.1.1.0 | 8.1.1.1 | 8.1.2.0","eol":null,"hubHref":"/vendor/oracle/financial_services_enterprise_case_management"},{"vendor":"oracle","product":"mysql_enterprise_monitor","name":"mysql enterprise monitor","label":"mysql_enterprise_monitor","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 8.0.29","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.0.29","eol":null,"hubHref":"/vendor/oracle/mysql_enterprise_monitor"},{"vendor":"oracle","product":"product_lifecycle_analytics","name":"product lifecycle analytics","label":"product_lifecycle_analytics","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"3.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"3.6.1","eol":null,"hubHref":"/vendor/oracle/product_lifecycle_analytics"},{"vendor":"oracle","product":"retail_bulk_data_integration","name":"retail bulk data integration","label":"retail_bulk_data_integration","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"16.0.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"16.0.3","eol":null,"hubHref":"/vendor/oracle/retail_bulk_data_integration"},{"vendor":"oracle","product":"retail_customer_management_and_segmentation_foundation","name":"retail customer management and segmentation foundation","label":"retail_customer_management_and_segmentation_foundation","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"17.0","noFixRecorded":false,"fixedIn":null},{"text":"18.0","noFixRecorded":false,"fixedIn":null},{"text":"19.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"17.0 | 18.0 | 19.0","eol":null,"hubHref":"/vendor/oracle/retail_customer_management_and_segmentation_foundation"},{"vendor":"oracle","product":"retail_financial_integration","name":"retail financial integration","label":"retail_financial_integration","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"14.1.3.2","noFixRecorded":false,"fixedIn":null},{"text":"15.0.3.1","noFixRecorded":false,"fixedIn":null},{"text":"16.0.3","noFixRecorded":false,"fixedIn":null},{"text":"19.0.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"14.1.3.2 | 15.0.3.1 | 16.0.3 | 19.0.1","eol":null,"hubHref":"/vendor/oracle/retail_financial_integration"},{"vendor":"oracle","product":"retail_integration_bus","name":"retail integration bus","label":"retail_integration_bus","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"14.1.3.2","noFixRecorded":false,"fixedIn":null},{"text":"15.0.3.1","noFixRecorded":false,"fixedIn":null},{"text":"16.0.3","noFixRecorded":false,"fixedIn":null},{"text":"19.0.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"14.1.3.2 | 15.0.3.1 | 16.0.3 | 19.0.1","eol":null,"hubHref":"/vendor/oracle/retail_integration_bus"},{"vendor":"oracle","product":"retail_merchandising_system","name":"retail merchandising system","label":"retail_merchandising_system","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"16.0.3","noFixRecorded":false,"fixedIn":null},{"text":"19.0.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"16.0.3 | 19.0.1","eol":null,"hubHref":"/vendor/oracle/retail_merchandising_system"},{"vendor":"oracle","product":"retail_xstore_point_of_service","name":"retail xstore point of service","label":"retail_xstore_point_of_service","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"20.0.1","noFixRecorded":false,"fixedIn":null},{"text":"21.0.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"20.0.1 | 21.0.0","eol":null,"hubHref":"/vendor/oracle/retail_xstore_point_of_service"},{"vendor":"oracle","product":"sd-wan_edge","name":"sd-wan edge","label":"sd-wan_edge","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"9.0","noFixRecorded":false,"fixedIn":null},{"text":"9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"9.0 | 9.1","eol":null,"hubHref":"/vendor/oracle/sd-wan_edge"},{"vendor":"oracle","product":"weblogic_server","name":"WebLogic Server","label":"weblogic_server","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"12.2.1.3.0","noFixRecorded":false,"fixedIn":null},{"text":"12.2.1.4.0","noFixRecorded":false,"fixedIn":null},{"text":"14.1.1.0.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"12.2.1.3.0 | 12.2.1.4.0 | 14.1.1.0.0","eol":null,"hubHref":"/vendor/oracle/weblogic_server"},{"vendor":"siemens","product":"operation_scheduler","name":"operation scheduler","label":"operation_scheduler","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 2.0.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.0.4","eol":null,"hubHref":"/vendor/siemens/operation_scheduler"},{"vendor":"siemens","product":"simatic_speech_assistant_for_machines","name":"simatic speech assistant for machines","label":"simatic_speech_assistant_for_machines","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 1.2.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.1","eol":null,"hubHref":"/vendor/siemens/simatic_speech_assistant_for_machines"},{"vendor":"siemens","product":"sinec_network_management_system","name":"sinec network management system","label":"sinec_network_management_system","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 1.0.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.3","eol":null,"hubHref":"/vendor/siemens/sinec_network_management_system"},{"vendor":"siemens","product":"sipass_integrated","name":"sipass integrated","label":"sipass_integrated","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2.80","noFixRecorded":false,"fixedIn":null},{"text":"2.85","noFixRecorded":false,"fixedIn":null}],"versionsText":"2.80 | 2.85","eol":null,"hubHref":"/vendor/siemens/sipass_integrated"},{"vendor":"siemens","product":"siveillance_identity","name":"siveillance identity","label":"siveillance_identity","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.5","noFixRecorded":false,"fixedIn":null},{"text":"1.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.5 | 1.6","eol":null,"hubHref":"/vendor/siemens/siveillance_identity"},{"vendor":"veritas","product":"access_appliance","name":"access appliance","label":"access_appliance","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"7.4.3","noFixRecorded":false,"fixedIn":null},{"text":"7.4.3.100","noFixRecorded":false,"fixedIn":null},{"text":"7.4.3.200","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.4.3 | 7.4.3.100 | 7.4.3.200","eol":null,"hubHref":"/vendor/veritas/access_appliance"},{"vendor":"veritas","product":"flex_appliance","name":"flex appliance","label":"flex_appliance","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.3","noFixRecorded":false,"fixedIn":null},{"text":"2.0","noFixRecorded":false,"fixedIn":null},{"text":"2.0.1","noFixRecorded":false,"fixedIn":null},{"text":"2.0.2","noFixRecorded":false,"fixedIn":null},{"text":"2.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.3 | 2.0 | 2.0.1 | 2.0.2 | 2.1","eol":null,"hubHref":"/vendor/veritas/flex_appliance"},{"vendor":"veritas","product":"netbackup_appliance","name":"netbackup appliance","label":"netbackup_appliance","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"4.0","noFixRecorded":false,"fixedIn":null},{"text":"4.0.0.1:maintenance_release1","noFixRecorded":false,"fixedIn":null},{"text":"4.0.0.1:maintenance_release2","noFixRecorded":false,"fixedIn":null},{"text":"4.0.0.1:maintenance_release3","noFixRecorded":false,"fixedIn":null},{"text":"4.1","noFixRecorded":false,"fixedIn":null},{"text":"4.1.0.1:maintenance_release1","noFixRecorded":false,"fixedIn":null},{"text":"4.1.0.1:maintenance_release2","noFixRecorded":false,"fixedIn":null}],"versionsText":"4.0 | 4.0.0.1:maintenance_release1 | 4.0.0.1:maintenance_release2 | 4.0.0.1:maintenance_release3 | 4.1 | 4.1.0.1:maintenance_release1 | 4.1.0.1:maintenance_release2","eol":null,"hubHref":"/vendor/veritas/netbackup_appliance"},{"vendor":"veritas","product":"netbackup_flex_scale_appliance","name":"netbackup flex scale appliance","label":"netbackup_flex_scale_appliance","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2.1","noFixRecorded":false,"fixedIn":null},{"text":"3.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"2.1 | 3.0","eol":null,"hubHref":"/vendor/veritas/netbackup_flex_scale_appliance"},{"vendor":"veritas","product":"netbackup_virtual_appliance","name":"netbackup virtual appliance","label":"netbackup_virtual_appliance","ecosystem":null,"cpePart":"h","purl":null,"purlType":null,"versions":[{"text":"4.0","noFixRecorded":false,"fixedIn":null},{"text":"4.0.0.1:maintenance_release1","noFixRecorded":false,"fixedIn":null},{"text":"4.0.0.1:maintenance_release2","noFixRecorded":false,"fixedIn":null},{"text":"4.0.0.1:maintenance_release3","noFixRecorded":false,"fixedIn":null},{"text":"4.1","noFixRecorded":false,"fixedIn":null},{"text":"4.1.0.1:maintenance_release1","noFixRecorded":false,"fixedIn":null},{"text":"4.1.0.1:maintenance_release2","noFixRecorded":false,"fixedIn":null}],"versionsText":"4.0 | 4.0.0.1:maintenance_release1 | 4.0.0.1:maintenance_release2 | 4.0.0.1:maintenance_release3 | 4.1 | 4.1.0.1:maintenance_release1 | 4.1.0.1:maintenance_release2","eol":null,"hubHref":"/vendor/veritas/netbackup_virtual_appliance"},{"vendor":"vmware","product":"spring_framework","name":"Spring Framework","label":"spring_framework","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 5.2.20","noFixRecorded":false,"fixedIn":null},{"text":"≥ 5.3.0, < 5.3.18","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.2.20 | ≥ 5.3.0, < 5.3.18","eol":null,"hubHref":"/vendor/vmware/spring_framework"}],"affectedCount":45,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://tanzu.vmware.com/security/cve-2022-22965","label":"tanzu.vmware.com/security/cve-2022-22965","hostname":"tanzu.vmware.com","tags":["X Refsource MISC","REPORT","WEB","Mitigation","Vendor Advisory"]},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67","label":"tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67","hostname":"tools.cisco.com","tags":["Vendor Advisory","X Refsource CISCO","WEB","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","label":"www.oracle.com/security-alerts/cpuapr2022.html","hostname":"www.oracle.com","tags":["X Refsource MISC","WEB","Third Party Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0005","label":"psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0005","hostname":"psirt.global.sonicwall.com","tags":["X Refsource CONFIRM","WEB","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/166713/Spring4Shell-Code-Execution.html","label":"packetstormsecurity.com/files/166713/Spring4Shell-Code-Execution.html","hostname":"packetstormsecurity.com","tags":["X Refsource MISC","WEB","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-254054.pdf","label":"cert-portal.siemens.com/productcert/pdf/ssa-254054.pdf","hostname":"cert-portal.siemens.com","tags":["X Refsource CONFIRM","WEB","Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","label":"www.oracle.com/security-alerts/cpujul2022.html","hostname":"www.oracle.com","tags":["X Refsource MISC","WEB","Patch","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/167011/Spring4Shell-Spring-Framework-Class-Property-Remote-Code-Execution.html","label":"packetstormsecurity.com/files/…","hostname":"packetstormsecurity.com","tags":["X Refsource MISC","WEB","Third Party Advisory","VDB Entry"]},{"url":"https://www.kb.cert.org/vuls/id/970766","label":"www.kb.cert.org/vuls/id/970766","hostname":"www.kb.cert.org","tags":["WEB","US Government Resource"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-22965","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-22965","hostname":"www.cisa.gov","tags":["Government Resource","WEB","US Government Resource"]},{"url":"https://ubuntu.com/security/CVE-2022-22965","label":"ubuntu.com/security/CVE-2022-22965","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://bugalert.org/content/notices/2022-03-30-spring.html","label":"bugalert.org/content/notices/2022-03-30-spring.html","hostname":"bugalert.org","tags":["REPORT"]},{"url":"https://spring.io/blog/2022/03/31/spring-framework-rce-early-announcement","label":"spring.io/blog/2022/03/31/spring-framework-rce-early-announcement","hostname":"spring.io","tags":["REPORT","WEB"]},{"url":"https://github.com/spring-projects/spring-framework/issues/28260","label":"github.com/spring-projects/spring-framework/issues/28260","hostname":"github.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-22965","label":"www.cve.org/CVERecord?id=CVE-2022-22965","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog","hostname":"www.cisa.gov","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-7165-1","label":"ubuntu.com/security/notices/USN-7165-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-22965","label":"security-tracker.debian.org/tracker/CVE-2022-22965","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22965","label":"nvd.nist.gov/vuln/detail/CVE-2022-22965","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/spring-projects/spring-framework/commit/002546b3e4b8d791ea6acccb81eb3168f51abb15","label":"github.com/spring-projects/spring-framework/commit/002546b3e4b8d791ea6acccb81eb3168f51abb15","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/spring-projects/spring-boot/releases/tag/v2.5.12","label":"github.com/spring-projects/spring-boot/releases/tag/v2.5.12","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/spring-projects/spring-boot/releases/tag/v2.6.6","label":"github.com/spring-projects/spring-boot/releases/tag/v2.6.6","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/spring-projects/spring-framework","label":"github.com/spring-projects/spring-framework","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://github.com/spring-projects/spring-framework/releases/tag/v5.2.20.RELEASE","label":"github.com/spring-projects/spring-framework/releases/tag/v5.2.20.RELEASE","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/spring-projects/spring-framework/releases/tag/v5.3.18","label":"github.com/spring-projects/spring-framework/releases/tag/v5.3.18","hostname":"github.com","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2022-04-01T22:17:30.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"kev-added","date":"2022-04-04T00:00:00.000Z","label":"Added to CISA KEV","detail":"Spring Framework JDK 9+ Remote Code Execution Vulnerability","source":"cisa"},{"kind":"kev-due","date":"2022-04-25T00:00:00.000Z","label":"CISA remediation due","detail":"Apply updates per vendor instructions.","source":"cisa"},{"kind":"modified","date":"2025-10-21T23:15:42.792Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":85,"level":"critical","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T07:41:30.921Z","stale":false,"partial":false}}