Netbackup Virtual Appliance
1 CVEs
product
Monthly
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Java
RCE
Code Injection
Tomcat
Spring Framework
+37
NVD
CVSS 3.1
9.8
EPSS
99.7%
CVE-2022-22965
Maven
EPSS 100%
CVSS 9.8
CRITICAL
POC
KEV
PATCH
THREAT
Act Now
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Java
RCE
Code Injection
+39
NVD