Outbreak Alert: VMWare Spring4Shell Vulnerability

FortiRecon provides outside-in coverage for risks towards customers.

External Attack Surface Management helps customers to identify exposure to known and unknown enterprise assets and associated vulnerabilities across the enterprise.

Vulnerability Intelligence Module under Adversary Centric Intelligence (ACI) provides realistic view of impact of the vulnerability based upon chatter and discussion of the same across various external sources such as Darkweb, social media, News / Blogs etc.

CVE ID

CVE-2022-22965

CVE Title

Spring Framework Remote Code Execution Vulnerability (Spring4Shell)

CVE Severity

High

ACI Reporting Coverage

16 Reports (TECHINT, OSINT, Media, Darknet)

Additional References

• 1 Darknet mention for this vulnerability.
• 34 articles referencing this CVE on security blogs.
• 2 articles referencing possibly working exploit(s) for this vulnerability.
• 82 public code repositories containing possible POC exploits for this vulnerability.
• 403 mentions on social media for this vulnerability.

EASM Scanner

Yes