Lucene search
HistoryApr 01, 2022 - 11:15 p.m.
CVE-2022-22965
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.975 High
EPSS
Percentile
100.0%
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.
Affected configurations
Node
vmwarespring_frameworkRange<5.2.20
ORvmwarespring_frameworkRange5.3.0–5.3.18
Node
ciscocx_cloud_agentRange<2.1.0
Node
oraclecommunications_cloud_native_core_automated_test_suiteMatch1.9.0
ORoraclecommunications_cloud_native_core_automated_test_suiteMatch22.1.0
ORoraclecommunications_cloud_native_core_consoleMatch1.9.0
ORoraclecommunications_cloud_native_core_consoleMatch22.1.0
ORoraclecommunications_cloud_native_core_network_exposure_functionMatch22.1.0
ORoraclecommunications_cloud_native_core_network_function_cloud_native_environmentMatch1.10.0
ORoraclecommunications_cloud_native_core_network_function_cloud_native_environmentMatch22.1.0
ORoraclecommunications_cloud_native_core_network_repository_functionMatch1.15.0
ORoraclecommunications_cloud_native_core_network_repository_functionMatch22.1.0
ORoraclecommunications_cloud_native_core_network_slice_selection_functionMatch1.8.0
ORoraclecommunications_cloud_native_core_network_slice_selection_functionMatch1.15.0
ORoraclecommunications_cloud_native_core_network_slice_selection_functionMatch22.1.0
ORoraclecommunications_cloud_native_core_policyMatch1.15.0
ORoraclecommunications_cloud_native_core_policyMatch22.1.0
ORoraclecommunications_cloud_native_core_security_edge_protection_proxyMatch1.7.0
ORoraclecommunications_cloud_native_core_security_edge_protection_proxyMatch22.1.0
ORoraclecommunications_cloud_native_core_unified_data_repositoryMatch1.15.0
ORoraclecommunications_cloud_native_core_unified_data_repositoryMatch22.1.0
ORoraclecommunications_policy_managementMatch12.6.0.0.0
ORoraclefinancial_services_analytical_applications_infrastructureMatch8.1.1
ORoraclefinancial_services_analytical_applications_infrastructureMatch8.1.2.0
ORoraclefinancial_services_behavior_detection_platformMatch8.1.1.0
ORoraclefinancial_services_behavior_detection_platformMatch8.1.1.1
ORoraclefinancial_services_behavior_detection_platformMatch8.1.2.0
ORoraclefinancial_services_enterprise_case_managementMatch8.1.1.0
ORoraclefinancial_services_enterprise_case_managementMatch8.1.1.1
ORoraclefinancial_services_enterprise_case_managementMatch8.1.2.0
ORoraclemysql_enterprise_monitorRange<8.0.29
ORoracleproduct_lifecycle_analyticsMatch3.6.1
ORoracleretail_xstore_point_of_serviceMatch20.0.1
ORoracleretail_xstore_point_of_serviceMatch21.0.0
ORoraclesd-wan_edgeMatch9.0
ORoraclesd-wan_edgeMatch9.1
ORsiemensoperation_schedulerRange<2.0.4
ORsiemenssipass_integratedMatch2.80
ORsiemenssipass_integratedMatch2.85
ORsiemenssiveillance_identityMatch1.5
ORsiemenssiveillance_identityMatch1.6
Node
veritasaccess_applianceMatch7.4.3
ORveritasaccess_applianceMatch7.4.3.100
ORveritasaccess_applianceMatch7.4.3.200
Node
veritasaccess_applianceMatch7.4.3
ORveritasaccess_applianceMatch7.4.3.100
ORveritasaccess_applianceMatch7.4.3.200
ORveritasflex_applianceMatch1.3
ORveritasflex_applianceMatch2.0
ORveritasflex_applianceMatch2.0.1
ORveritasflex_applianceMatch2.0.2
ORveritasflex_applianceMatch2.1
ORveritasnetbackup_flex_scale_applianceMatch2.1
ORveritasnetbackup_flex_scale_applianceMatch3.0
ORveritasnetbackup_applianceMatch4.0
ORveritasnetbackup_applianceMatch4.0.0.1maintenance_release1
ORveritasnetbackup_applianceMatch4.0.0.1maintenance_release2
ORveritasnetbackup_applianceMatch4.0.0.1maintenance_release3
ORveritasnetbackup_applianceMatch4.1
ORveritasnetbackup_applianceMatch4.1.0.1maintenance_release1
ORveritasnetbackup_applianceMatch4.1.0.1maintenance_release2
ORveritasnetbackup_virtual_applianceMatch4.0
ORveritasnetbackup_virtual_applianceMatch4.0.0.1maintenance_release1
ORveritasnetbackup_virtual_applianceMatch4.0.0.1maintenance_release2
ORveritasnetbackup_virtual_applianceMatch4.0.0.1maintenance_release3
ORveritasnetbackup_virtual_applianceMatch4.1
ORveritasnetbackup_virtual_applianceMatch4.1.0.1maintenance_release1
ORveritasnetbackup_virtual_applianceMatch4.1.0.1maintenance_release2
Node
siemensoperation_schedulerRange<2.0.4
ORsiemenssimatic_speech_assistant_for_machinesRange<1.2.1
ORsiemenssinec_network_management_systemRange<1.0.3
ORsiemenssipass_integratedMatch2.80
ORsiemenssipass_integratedMatch2.85
ORsiemenssiveillance_identityMatch1.5
ORsiemenssiveillance_identityMatch1.6
Node
oraclecommerce_platformMatch11.3.2
ORoraclecommunications_cloud_native_core_binding_support_functionMatch22.1.3
ORoraclecommunications_unified_inventory_managementMatch7.4.1
ORoraclecommunications_unified_inventory_managementMatch7.4.2
ORoraclecommunications_unified_inventory_managementMatch7.5.0
ORoracleretail_bulk_data_integrationMatch16.0.3
ORoracleretail_customer_management_and_segmentation_foundationMatch17.0
ORoracleretail_customer_management_and_segmentation_foundationMatch18.0
ORoracleretail_customer_management_and_segmentation_foundationMatch19.0
ORoracleretail_financial_integrationMatch14.1.3.2
ORoracleretail_financial_integrationMatch15.0.3.1
ORoracleretail_financial_integrationMatch16.0.3
ORoracleretail_financial_integrationMatch19.0.1
ORoracleretail_integration_busMatch14.1.3.2
ORoracleretail_integration_busMatch15.0.3.1
ORoracleretail_integration_busMatch16.0.3
ORoracleretail_integration_busMatch19.0.1
ORoracleretail_merchandising_systemMatch16.0.3
ORoracleretail_merchandising_systemMatch19.0.1
ORoracleweblogic_serverMatch12.2.1.3.0
ORoracleweblogic_serverMatch12.2.1.4.0
ORoracleweblogic_serverMatch14.1.1.0.0
References
packetstormsecurity.com/files/166713/Spring4Shell-Code-Execution.html
packetstormsecurity.com/files/167011/Spring4Shell-Spring-Framework-Class-Property-Remote-Code-Execution.html
cert-portal.siemens.com/productcert/pdf/ssa-254054.pdf
psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0005
tanzu.vmware.com/security/cve-2022-22965
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67
www.oracle.com/security-alerts/cpuapr2022.html
www.oracle.com/security-alerts/cpujul2022.html
Related
thn
thn
Security Patch Releases for Critical Zero-Day Bug in Java Spring Framework
2022-03-31 15:35:00
Watch Out! Cryptocurrency Miners Targeting Dockers, AWS and Alibaba Cloud
2022-04-22 09:30:00
talosblog
talosblog
Threat Advisory: Spring4Shell
2022-04-04 10:26:10
githubexploit
githubexploit
Exploit for Code Injection in Vmware Spring Framework
2022-04-01 12:18:29
Exploit for Code Injection in Vmware Spring Framework
2022-05-19 23:16:40
Exploit for Code Injection in Vmware Spring Framework
2022-11-28 14:34:51
nessus
nessus
Spring Framework Spring4Shell (CVE-2022-22965)
2022-04-06 00:00:00
Amazon Linux 2 : tomcat (ALASTOMCAT9-2023-004)
2023-09-27 00:00:00
trendmicroblog
trendmicroblog
redhat
redhat
rapid7blog
rapid7blog
XSS in JSON: Old-School Attacks for Modern Applications
2022-05-04 15:48:03
Securing Your Applications Against Spring4Shell (CVE-2022-22965)
2022-04-01 22:26:36
ubuntucve
ubuntucve
CVE-2022-22965
2022-04-01 00:00:00
msrc
msrc
Microsoft’s Response to CVE-2022-22965 Spring Framework
2022-04-05 07:00:00
Microsoft’s Response to CVE-2022-22965 Spring Framework
2022-04-05 07:00:00
CVE-2022-22965 Spring Framework に対するマイクロソフトの対応
2022-04-05 07:00:00
nuclei
nuclei
Spring - Remote Code Execution
2022-04-01 11:43:45
ibm
ibm
Security Bulletin: IBM Maximo For Civil infrastructure is vulnerable to a remote code execution in Spring Framework (CVE-2022-22965)
2022-04-11 15:15:01
redhatcve
redhatcve
CVE-2022-22965
2022-03-31 18:32:57
vmware
vmware
packetstorm
packetstorm
Spring4Shell Spring Framework Class Property Remote Code Execution
2022-05-10 00:00:00
vaadin
vaadin
Spring Core Remote Code Execution via Data Binding on JDK 9+
2022-04-01 00:00:00
openvas
openvas
cvelist
cvelist
CVE-2022-22965
2022-04-01 22:17:30
CVE-2022-43712
2023-07-26 00:00:00
checkpoint_advisories
checkpoint_advisories
Spring Core Remote Code Execution (CVE-2022-22965)
2022-03-31 00:00:00
cve
cve
CVE-2022-22965
2022-04-01 23:15:13
CVE-2022-43712
2023-07-26 14:15:09
kitploit
kitploit
metasploit
metasploit
Spring Framework Class property RCE (Spring4Shell)
2022-04-07 13:22:18
cisa_kev
cisa_kev
Spring Framework JDK 9+ Remote Code Execution Vulnerability
2022-04-04 00:00:00
osv
osv
CVE-2022-22965
2022-04-01 23:15:13
Remote Code Execution in Spring Framework
2022-03-31 18:30:50
github
github
Remote Code Execution in Spring Framework
2022-03-31 18:30:50
zdt
zdt
Spring4Shell Spring Framework Class Property Remote Code Execution Exploit
2022-05-10 00:00:00
debiancve
debiancve
CVE-2022-22965
2022-04-01 23:15:13
hivepro
hivepro
RCE Spring Framework Zero-Day vulnerability “Spring4Shell”
2022-04-12 02:21:11
Weekly Threat Digest: 4 – 10 April 2022
2022-04-13 06:34:35
Weekly Threat Digest: 28 March – 3 April 2022
2022-04-05 10:11:43
cloudfoundry
cloudfoundry
cisco
cisco
Vulnerability in Spring Framework Affecting Cisco Products: March 2022
2022-04-01 23:45:00
attackerkb
attackerkb
CVE-2022-22965
2022-04-01 00:00:00
spring
spring
Spring Framework RCE, Mitigation Alternative
2022-04-01 11:49:00
Spring Framework Data Binding Rules Vulnerability (CVE-2022-22968)
2022-04-13 13:00:00
Spring Framework RCE, Early Announcement
2022-03-31 10:27:00
veracode
veracode
Remote Code Execution (RCE)
2022-03-31 00:56:39
prion
prion
Remote code execution
2022-04-01 23:15:00
Design/Logic Flaw
2023-07-26 14:15:00
ics
ics
paloalto
paloalto
nvd
nvd
CVE-2022-43712
2023-07-26 14:15:09
qualysblog
qualysblog
Spring Framework Zero-Day Remote Code Execution (Spring4Shell) Vulnerability
2022-03-31 09:00:00
Why Is Snapshot Scanning Not Enough?
2022-11-01 13:27:50
The January 2023 Oracle Critical Patch Update
2023-01-18 00:43:03
fortinet
fortinet
CVE-2022-22965 and CVE-2022-22963 vulnerabilities
2022-04-01 00:00:00
f5
f5
cert
cert
cisa
cisa
securelist
securelist
IT threat evolution Q2 2022
2022-08-15 12:00:34
Spring4Shell (CVE-2022-22965): details and mitigations
2022-04-04 15:30:36
trellix
trellix
The Bug Report – June 2022 Edition
2022-07-06 00:00:00
The Bug Report – June 2022 Edition
2022-07-06 00:00:00
The Bug Report – April 2022 Edition
2022-05-04 00:00:00
avleonov
avleonov
malwarebytes
malwarebytes
4 over-hyped security vulnerabilities of 2022
2022-12-19 01:00:00
mmpc
mmpc
mssecure
mssecure
impervablog
impervablog
Imperva Protects from New Spring Framework Zero-Day Vulnerabilities
2022-03-31 15:20:03
checkpoint_security
checkpoint_security
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.975 High
EPSS
Percentile
100.0%
Related for NVD:CVE-2022-22965