CodeSecure
Cross-Product Information
Compatibility and Support Advisories

CVE-2022-22965 SpringShell Vulnerability

Oliver Nott

Updated September 04, 2023 14:16

CVE-2022-22965 is a remote code execution (RCE) vulnerability in the Spring Framework, a component that is not used by CodeSonar or CodeSentry. As called out Tomcat is a prerequisite needed and again is not used in CodeSecure products.

This vulnerability was found on March 29th 2022 as a previously zero-day vulnerability.

Articles in this section

CodeSonar: Supported Platforms, Languages, and Compilers
CodeSentry: On-Premise System Requirements & Supported File Formats
LDAP authentication issue in CodeSonar versions 7.4 - 8.1
(CVE-2023-38545 & CVE-2023-3854) - CURL Zero-day Exploit Vulnerability
OpenSSL 3.0.7 Patch
CVE-2022-42889 - Text4Shell
Log4J2 Vulnerability to Zero-Day Exploit within CodeSonar and CodeSentry
CVE-2022-0778 OpenSSL vulnerability
CVE-2022-22965 SpringShell Vulnerability

White Papers

Read our white papers to find useful information about software development in the IoT era, where devices must not only function with impeccable quality and safety but also remain resilient to cyber-attacks.

Product Sheets

Read our datasheets and company briefs to gain quick insights into our solutions, products, and integrations, including their capabilities, benefits, and supported environments.

TalkSecure

Topics relating to DevSecOps, application security testing (AST), binary analysis, product security, software assurance and others.