CVE-2022-22963Vulnerability
VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability
Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .
Named in 1 report · first reported by Group-IB · last reported
Last reported 4 years ago
CISA KEVAdded 25 Aug 2022
Fix due 15 Sep 2022
Used by ransomware: not knownCISA KEV catalogue
Fix due 15 Sep 2022
Used by ransomware: not knownCISA KEV catalogue
EPSS99.9%
higher than 99% of CVEsFIRST EPSS, as of 13 Oct 2026
higher than 99% of CVEsFIRST EPSS, as of 13 Oct 2026
What the reports say
1 report, newest first · the exact sentence from each-
Mitigating Spring4Shell with Group-IB“Not CVE-2022-22963, which is a vulnerability released on March 29, 2022 and affects the Spring Cloud Library.”
Indicators reported together
named in the same reports- spring[.]ioin 1 report
Copy this indicator · defanged
Also named with it: CVE-2022-22965, CVE-2022-22950, CVE-2022-27772, CVE-2010-1622
Thanks — we review every report.