Spring4Shell is a a zero-dat vulnerability in the Spring Core Java network. It's tracked as CVE-2022-22965. Impacted users must upgrade to the latest versions of Spring immediately.
Spring4Shell
Key takeaways
When exploited, Spring4Shell could facilitate Remote Code Injection (RCE)- The current known exploit only occurs on Tomcat servers, but its limitation to this environment isn't yet conclusive.
- Impacted users must upgrade to the latest versions of Spring immediately.
Reviewed by
No items found.
Author
Edward Kost
Reviewed by
See UpGuard In Action
Book a free, personalized onboarding call with one of our cybersecurity experts.
More from our blog
Learn more about the latest issues in cybersecurity.
Left Unsupervised: 10 Times Access Outlived Its Authorization
Left Unsupervised: 10 Times Access Outlived Its Authorization
Access granted once shouldn’t mean access forever. Read more on how unmonitored access caused 10 of these real-life breaches and what they taught us.
.jpeg){kind=avatar}
Revashni Moodley
August 25, 2026
The Vendor Assurance Confidence Gap: Why It’s Widest With Your Most Critical Vendors
The Vendor Assurance Confidence Gap: Why It’s Widest With Your Most Critical Vendors
Vendor assurance efforts are rising while confidence in them is falling. This gap is widest with the vendors that matter most. Here’s why.
Cassy van Eeden
August 21, 2026
What’s New in Risk Automations: 4 Templates for Vendor and User Risk
What’s New in Risk Automations: 4 Templates for Vendor and User Risk
4 new Risk Automations templates covering Vendor and User Risk, from automated vendor onboarding to app access request routing, all ready to deploy today.
Revashni Moodley
August 11, 2026
Higher Education TPRM in 2026: New Research Maps the Vendor Visibility Gap
Higher Education TPRM in 2026: New Research Maps the Vendor Visibility Gap
Explore UpGuard’s latest research into higher education third-party risk, including supplier concentration and systemic vendor exposure.
Cassy van Eeden
August 6, 2026
Sign up for our newsletter
UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights.
Free instant security score
How secure is your organization?
