ctrlINT What the industry said about every indicator, with the quote

CVE-2022-22965Vulnerability

Spring Framework JDK 9+ Remote Code Execution Vulnerability

Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .

Reported by 4 independent sources · first reported by Group-IB · last reported

Last reported 12 days ago

CISA KEVAdded 4 Apr 2022
Fix due 25 Apr 2022
Used by ransomware: not knownCISA KEV catalogue
EPSS99.6%
higher than 99% of CVEsFIRST EPSS, as of 16 Oct 2026

What the reports say

4 reports, newest first · the exact sentence from each

  1. “CVE-2022-22965”

    Recorded FutureVendor
    September 2026 CVE Landscape

  2. “CVE-2022-22965 – Spring Framework JDK 9+ Remote Code Execution Vulnerability”

    GreyNoiseVendor
    GreyNoise Detects Active Exploitation of CVEs Mentioned in Black Basta’s Leaked Chat Logs

  3. “Elastic's response to the Spring4Shell vulnerability (CVE-2022-22965)”

    Elastic Security LabsVendor
    Elastic's response to the Spring4Shell vulnerability (CVE-2022-22965)

  4. “Spring4Shell (which has been assigned an id of CVE-2022-22965) is the unofficial name of the recently discovered vulnerability, which is exploitable in some installations of the Spring Framework.”

    Group-IBVendor
    Mitigating Spring4Shell with Group-IB

Indicators reported together

named in the same reports

Also named with it: CVE-2024-21762, CVE-2021-44228, CVE-2026-60004, CVE-2017-11882, CVE-2023-38831, CVE-2022-0847, CVE-2026-35273, CVE-2023-36884, CVE-2026-85046, CVE-2026-85880, CVE-2026-87491, CVE-2026-48710, CVE-2025-39964, CVE-2026-20316, CVE-2026-39987, CVE-2026-60137, CVE-2026-63030, CVE-2021-29441, CVE-2026-81963, CVE-2026-81578

Thanks — we review every report.

Report a wrong value
What is wrong with CVE-2022-22965 here?
No account needed. We do not store your IP address.