AX·NEWS
Sign in

Vulnerability

CVE-2022-22965 — Spring Framework JDK 9+ Remote Code Execution Vulnerability

Exploited in the wild 1 story · 1 outlet

Official record (cve.org)NVDCVE watch

Impacted if

VMware Spring Framework

CISA Known Exploited Vulnerabilities

Added on 2022-04-04, federal remediation due 2022-04-25. Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.

Required action: Apply updates per vendor instructions.

First seen by AX-NEWS · latest story . Severity: NVD, or the CVE record while the NVD has not scored it. This product uses data from the NVD API but is not endorsed or certified by the NVD.

Coverage

  1. September 2026 CVE Landscape
    USRecorded Future Cybersecurity

    In September 2026, Insikt Group® identified 94 high-impact vulnerabilities to prioritize for remediation , 59 of which had a Very Critical Recorded Future Risk Score. This represents a 29% increase from last month. 43 of these…