CVEvulnerability

CVE-2022-22965

9.8 CRITICAL Known exploited Published 2022-04-01 Modified 2026-06-17 Official page ↗

CISA Known Exploited Vulnerability

Spring Framework JDK 9+ Remote Code Execution Vulnerability — VMware Spring Framework

Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.

Added to KEV
2022-04-04
Remediation due
2022-04-25
Ransomware use
Unknown
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2022-22965
Status
Analyzed
Published
2022-04-01
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-94

Description

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.

Affected configurations

• vmware spring framework (< 5.2.20) • vmware spring framework (>= 5.3.0 < 5.3.18) • cisco cx cloud agent (< 2.1.0) • oracle communications cloud native core automated test suite 1.9.0 • oracle communications cloud native core automated test suite 22.1.0 • oracle communications cloud native core console 1.9.0 • oracle communications cloud native core console 22.1.0 • oracle communications cloud native core network exposure function 22.1.0 • oracle communications cloud native core network function cloud native environment 1.10.0 • oracle communications cloud native core network function cloud native environment 22.1.0 • oracle communications cloud native core network repository function 1.15.0 • oracle communications cloud native core network repository function 22.1.0 • oracle communications cloud native core network slice selection function 1.8.0 • oracle communications cloud native core network slice selection function 1.15.0 • oracle communications cloud native core network slice selection function 22.1.0 • oracle communications cloud native core policy 1.15.0 • oracle communications cloud native core policy 22.1.0 • oracle communications cloud native core security edge protection proxy 1.7.0 • oracle communications cloud native core security edge protection proxy 22.1.0 • oracle communications cloud native core unified data repository 1.15.0 • oracle communications cloud native core unified data repository 22.1.0 • oracle communications policy management 12.6.0.0.0 • oracle financial services analytical applications infrastructure 8.1.1 • oracle financial services analytical applications infrastructure 8.1.2.0 • oracle financial services behavior detection platform 8.1.1.0 • oracle financial services behavior detection platform 8.1.1.1 • oracle financial services behavior detection platform 8.1.2.0 • oracle financial services enterprise case management 8.1.1.0 • oracle financial services enterprise case management 8.1.1.1 • oracle financial services enterprise case management 8.1.2.0 • oracle mysql enterprise monitor (< 8.0.29) • oracle product lifecycle analytics 3.6.1 • oracle retail xstore point of service 20.0.1 • oracle retail xstore point of service 21.0.0 • oracle sd-wan edge 9.0 • oracle sd-wan edge 9.1 • siemens operation scheduler (< 2.0.4) • siemens sipass integrated 2.80 • siemens sipass integrated 2.85 • siemens siveillance identity 1.5 • siemens siveillance identity 1.6 • veritas access appliance 7.4.3 • veritas access appliance 7.4.3.100 • veritas access appliance 7.4.3.200 • veritas flex appliance 1.3 • veritas flex appliance 2.0 • veritas flex appliance 2.0.1 • veritas flex appliance 2.0.2 • veritas flex appliance 2.1 • veritas netbackup flex scale appliance 2.1 • veritas netbackup flex scale appliance 3.0 • veritas netbackup appliance 4.0 • veritas netbackup appliance 4.0.0.1 • veritas netbackup appliance 4.1 • veritas netbackup appliance 4.1.0.1 • veritas netbackup virtual appliance 4.0 • veritas netbackup virtual appliance 4.0.0.1 • veritas netbackup virtual appliance 4.1 • veritas netbackup virtual appliance 4.1.0.1 • siemens simatic speech assistant for machines (< 1.2.1) … and 23 more

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References