Lucene search

Nitesh SuranaTRENDMICROBLOG:AFF0912EF635E2446F0D546515038F73

HistoryApr 20, 2022 - 12:00 a.m.

Spring4Shell Vulnerability CVE-2022-22965 Exploited to Deploy Cryptocurrency Miners

2022-04-2000:00:00

Nitesh Surana

www.trendmicro.com

119

0.975 High

EPSS

Percentile

100.0%

JSON

Recently, we observed the Spring4Shell vulnerability — a remote code execution bug, assigned as CVE-2022-22965 — being actively exploited by malicious actors to deploy cryptocurrency miners.

githubexploit

Exploit for Code Injection in Vmware Spring Framework

2023-09-02 10:41:05

Exploit for Code Injection in Vmware Spring Framework

2022-03-31 02:00:18

Exploit for Code Injection in Vmware Spring Framework

2022-03-31 16:14:36

vmware

VMware Response to Spring Framework Remote Code Execution Vulnerability (CVE-2022-22965)

2022-04-02 00:00:00

VMware Response to Spring Framework Remote Code Execution Vulnerability (CVE-2022-22965)

2022-04-02 00:00:00

VMware Response to Spring Framework Remote Code Execution Vulnerability (CVE-2022-22965)

2022-04-02 00:00:00

redhatcve

CVE-2022-22965

2022-03-31 18:32:57

rapid7blog

XSS in JSON: Old-School Attacks for Modern Applications

2022-05-04 15:48:03

It’s the Summer of AppSec: Q2 Improvements to Our Industry-Leading DAST and WAAP

2022-07-13 15:45:00

Securing Your Applications Against Spring4Shell (CVE-2022-22965)

2022-04-01 22:26:36

packetstorm

Spring4Shell Spring Framework Class Property Remote Code Execution

2022-05-10 00:00:00

ibm

Security Bulletin: Operations Dashboard in Cloud Pak for Integration is affected by Spring4Shell CVE-2022-22965

2022-04-27 14:59:37

Security Bulletin: IBM Sterling Connect:Direct Web Services is affected but not classified as vulnerable by a remote code execution in Spring Framework (CVE-2022-22965)

2022-06-07 05:50:15

Security Bulletin: IBM Sterling Control Center is affected but not classified as vulnerable by a remote code execution in Spring Framework (CVE-2022-22965)

2022-05-25 22:33:00

vaadin

Spring Core Remote Code Execution via Data Binding on JDK 9+

2022-04-01 00:00:00

msrc

Microsoft’s Response to CVE-2022-22965 Spring Framework

2022-04-05 07:00:00

Microsoft’s Response to CVE-2022-22965 Spring Framework

2022-04-05 23:41:01

Microsoft’s Response to CVE-2022-22965 Spring Framework

2022-04-05 07:00:00

openvas

VMware Spring Framework RCE Vulnerability (Spring4Shell, SpringShell) - Active Check

2023-12-13 00:00:00

VMware Spring Boot RCE Vulnerability (Spring4Shell, SpringShell)

2022-04-06 00:00:00

VMware Spring Framework RCE Vulnerability (Spring4Shell, SpringShell) - Version Check

2022-03-31 00:00:00

cvelist

CVE-2022-22965

2022-04-01 22:17:30

CVE-2022-43712

2023-07-26 00:00:00

nvd

CVE-2022-22965

2022-04-01 23:15:13

CVE-2022-43712

2023-07-26 14:15:09

attackerkb

CVE-2022-22965

2022-04-01 00:00:00

thn

Watch Out! Cryptocurrency Miners Targeting Dockers, AWS and Alibaba Cloud

2022-04-22 09:30:00

Security Patch Releases for Critical Zero-Day Bug in Java Spring Framework

2022-03-31 15:35:00

Hackers Exploiting Spring4Shell Vulnerability to Deploy Mirai Botnet Malware

2022-04-09 05:18:00

veracode

Remote Code Execution (RCE)

2022-03-31 00:56:39

osv

Remote Code Execution in Spring Framework

2022-03-31 18:30:50

CVE-2022-22965

2022-04-01 23:15:13

prion

Remote code execution

2022-04-01 23:15:00

Design/Logic Flaw

2023-07-26 14:15:00

nessus

RHEL 8 : spring-framework (Unpatched Vulnerability)

2024-05-11 00:00:00

Spring Framework Spring4Shell (CVE-2022-22965)

2022-04-06 00:00:00

Amazon Linux 2 : tomcat (ALASTOMCAT9-2023-004)

2023-09-27 00:00:00

spring

Spring Framework RCE, Mitigation Alternative

2022-04-01 11:49:00

Spring Framework Data Binding Rules Vulnerability (CVE-2022-22968)

2022-04-13 13:00:00

Spring Framework RCE, Early Announcement

2022-03-31 10:27:00

redhat

(RHSA-2022:1333) Low: Red Hat Integration Camel-K 1.6.5 security update

2022-04-12 18:28:41

(RHSA-2022:1627) Low: Red Hat AMQ Broker 7.9.4 release and security update

2022-04-27 09:45:16

(RHSA-2022:1626) Low: Red Hat AMQ Broker 7.8.6 release and security update

2022-04-27 09:45:11

talosblog

Threat Advisory: Spring4Shell

2022-04-04 10:26:10

trendmicroblog

CVE-2022-22965: Analyzing the Exploitation of Spring4Shell Vulnerability in Weaponizing and Executing the Mirai Botnet Malware

2022-04-08 00:00:00

Analyzing Attempts to Exploit the Spring4Shell Vulnerability CVE-2022-22965 to Deploy Cryptocurrency Miners

2022-04-20 00:00:00

ubuntucve

CVE-2022-22965

2022-04-01 00:00:00

nuclei

Spring - Remote Code Execution

2022-04-01 11:43:45

debiancve

CVE-2022-22965

2022-04-01 23:15:13

cloudfoundry

CVE-2022-22965: UAA affected by Spring Framework RCE via Data Binding on JDK 9+ | Cloud Foundry

2022-04-05 00:00:00

hivepro

RCE Spring Framework Zero-Day vulnerability “Spring4Shell”

2022-04-12 02:21:11

Weekly Threat Digest: 4 – 10 April 2022

2022-04-13 06:34:35

Weekly Threat Digest: 28 March – 3 April 2022

2022-04-05 10:11:43

cisco

Vulnerability in Spring Framework Affecting Cisco Products: March 2022

2022-04-01 23:45:00

checkpoint_advisories

Spring Core Remote Code Execution (CVE-2022-22965)

2022-03-31 00:00:00

zdt

Spring4Shell Spring Framework Class Property Remote Code Execution Exploit

2022-05-10 00:00:00

cisa_kev

Spring Framework JDK 9+ Remote Code Execution Vulnerability

2022-04-04 00:00:00

kitploit

Spring4Shell-POC - Dockerized Spring4Shell (CVE-2022-22965) PoC Application And Exploit

2022-05-10 12:30:00

Spring4Shell-Scan - A Fully Automated, Reliable, And Accurate Scanner For Finding Spring4Shell And Spring Cloud RCE Vulnerabilities

2022-04-24 21:30:00

metasploit

Spring Framework Class property RCE (Spring4Shell)

2022-04-07 13:22:18

cve

CVE-2022-22965

2022-04-01 23:15:13

CVE-2022-43712

2023-07-26 14:15:09

github

Remote Code Execution in Spring Framework

2022-03-31 18:30:50

ics

Hitachi Energy Lumada Asset Performance Management Prognostic Model Executor Service

2022-10-13 12:00:00

qualysblog

Spring Framework Zero-Day Remote Code Execution (Spring4Shell) Vulnerability

2022-03-31 09:00:00

Why Is Snapshot Scanning Not Enough?

2022-11-01 13:27:50

The January 2023 Oracle Critical Patch Update

2023-01-18 00:43:03

fortinet

CVE-2022-22965 and CVE-2022-22963 vulnerabilities

2022-04-01 00:00:00

paloalto

Informational: Impact of Spring Vulnerabilities CVE-2022-22963 and CVE-2022-22965

2022-03-31 02:30:00

cisa

Spring Releases Security Updates Addressing "Spring4Shell" and Spring Cloud Function Vulnerabilities

2022-04-01 00:00:00

securelist

IT threat evolution Q2 2022

2022-08-15 12:00:34

Spring4Shell (CVE-2022-22965): details and mitigations

2022-04-04 15:30:36

K11510688 : Spring Framework (Spring4Shell) and Spring Cloud vulnerabilities CVE-2022-22965, CVE-2022-22950, and CVE-2022-22963

2022-03-31 00:00:00

cert

Spring Framework insecurely handles PropertyDescriptor objects with data binding

2022-03-31 00:00:00

avleonov

Spring4Shell, Spring Cloud Function RCE and Spring Cloud Gateway Code Injection

2022-04-03 00:15:45

trellix

The Bug Report – June 2022 Edition

2022-07-06 00:00:00

The Bug Report – June 2022 Edition

2022-07-06 00:00:00

The Bug Report – April 2022 Edition

2022-05-04 00:00:00

mssecure

SpringShell RCE vulnerability: Guidance for protecting against and detecting CVE-2022-22965

2022-04-05 01:11:24

impervablog

Imperva Protects from New Spring Framework Zero-Day Vulnerabilities

2022-03-31 15:20:03

mmpc

SpringShell RCE vulnerability: Guidance for protecting against and detecting CVE-2022-22965

2022-04-05 01:11:24

malwarebytes

4 over-hyped security vulnerabilities of 2022

2022-12-19 01:00:00

checkpoint_security

Check Point Response to Spring Vulnerabilities CVE-2022-22963, CVE-2022-22946, CVE-2022-22947, CVE-2022-22965 (Spring4Shell) and CVE-2022-22950

2022-03-30 21:41:02

0.975 High

EPSS

Percentile

100.0%

JSON

Related for TRENDMICROBLOG:AFF0912EF635E2446F0D546515038F73