CVE-2022-22965: Spring Framework JDK 9+ Remote Code Execution Vulnerability
Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.
Read the original at CISA KEV Catalog ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2022-22965VMware
- Related
- CVE-2025-22224: VMware ESXi and Workstation TOCTOU Race Condition Vulnerability Known Exploited Vulnerabilities · Mar 04, 2025CVE-2025-22225: VMware ESXi Arbitrary Write Vulnerability Known Exploited Vulnerabilities · Mar 04, 2025CVE-2025-22226: VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability Known Exploited Vulnerabilities · Mar 04, 2025