CVE-2022-22965

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

June 17, 2026

Last Seen

September 8, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Spring Framework RCE Vulnerability CVE-2022-22965 Exploited in the Wild74.0

On March 30, 2022, a zero-day remote code execution vulnerability in the Spring Framework, dubbed 'Spring4Shell' and assigned CVE-2022-22965, was disclosed. This vulnerability affects Spring MVC and Spring WebFlux applications running on JDK 9+ and requires deployment on Tomcat as a WAR file. Multip...