Known Exploited Vulnerabilities · CISA KEV Catalog

CVE-2022-22965: Spring Framework JDK 9+ Remote Code Execution Vulnerability

Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.

Read the original at CISA KEV Catalog ↗

Topics
Vulnerabilities & Patching
Mentions
CVE-2022-22965VMware
Related
CVE-2025-22225: VMware ESXi Arbitrary Write Vulnerability Known Exploited Vulnerabilities · Mar 04, 2025