CVE-2022-22965.

Source-reported disclosure and enrichment record.

SEVERITY / CVSSUnscoredNo severity score in this snapshot.

EXPLOITATION STATUSCISA known exploitedAdded Apr 04, 2022

RECORD STATUSAwaiting NVD dataModified Apr 04, 2022

Disclosure summary

Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.

Apply updates per vendor instructions.

PUBLISHED 2022-04-04T00:00:00-04:00
MODIFIED 2022-04-04T00:00:00-04:00
INGESTED 2026-10-06T11:42:58-04:00