Spring4Shell is a a zero-dat vulnerability in the Spring Core Java network. It's tracked as CVE-2022-22965. Impacted users must upgrade to the latest versions of Spring immediately.
Spring4Shell
Key takeaways
When exploited, Spring4Shell could facilitate Remote Code Injection (RCE)- The current known exploit only occurs on Tomcat servers, but its limitation to this environment isn't yet conclusive.
- Impacted users must upgrade to the latest versions of Spring immediately.
Reviewed by
No items found.
Author
Edward Kost
Reviewed by
See UpGuard In Action
Book a free, personalized onboarding call with one of our cybersecurity experts.
More from our blog
Learn more about the latest issues in cybersecurity.
The Evidence Is In: UpGuard Named a Leader in the IDC MarketScape for Worldwide Third-Party Risk Management
The Evidence Is In: UpGuard Named a Leader in the IDC MarketScape for Worldwide Third-Party Risk Management
UpGuard has been named a Leader in the IDC MarketScape: Worldwide Third-Party Risk Management Services 2026 Vendor Assessment. Find out why.
Cassy van Eeden
October 18, 2026
We Researched Four AI Evidence Analysis Tools for TPRM. Here’s What We Found.
We Researched Four AI Evidence Analysis Tools for TPRM. Here’s What We Found.
We researched four AI evidence-parsing tools against four criteria that security teams often overlook. None nailed all four.
Cassy van Eeden
September 29, 2026
12 Cybersecurity Horror Stories of 2026 (No Costume Required)
12 Cybersecurity Horror Stories of 2026 (No Costume Required)
A warning ignored once becomes a headline. Read more about these 12 real 2026 cybersecurity incidents, and the sign each one gave before it made the news.
.jpeg){kind=avatar}
Revashni Moodley
October 14, 2026
Sign up for our newsletter
UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights.
Free instant security score
How secure is your organization?
