Advisoryhigh
Threat Advisory: Spring4Shell
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2010-1622 | — | 52% | — | ||
| CVE-2022-22963 | SpEL Expression Injection RCE in VMware Tanzu Spring Cloud Function | 9.8 | 100% | KEVPoC | KEV |
| CVE-2022-22965 | Unauthenticated RCE in VMware Spring Framework (Spring4Shell) - JDK 9+ Tomcat WARs | 9.8 | 100% | KEVPoC | KEV |
From the original article
3 min read at blog.talosintelligence.com
The Kenna Risk Score for CVE-2022-22965 is currently at maximum 100. This is an exceptionally rare score, of which only 415 out of 184,000 CVEs (or 0. 22 percent) have achieved, reflecting the severity and potential effects of this vulnerability.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.