| ID | Name | Product | Published | Updated | Severity |
|---|
| 113217 | Spring Framework < 5.2.20 / 5.3.x < 5.3.18 Remote Code Execution (Spring4Shell) | Web App Scanning | Component Vulnerability | 3/31/2022 | 6/17/2026 | critical |
| 409346 | SCA: security update for org.springframework.boot:spring-boot-starter-web, org.springframework.boot:spring-boot-starter-webflux, org.springframework:spring-beans, org.springframework:spring-webflux, org.springframework:spring-webmvc (GHSA-36p3-wjmg-h94x) | Tenable Cloud Security | SCA Checks | 1/23/2025 | 7/2/2026 | critical |
| 409346 | SCA: security update for org.springframework.boot:spring-boot-starter-web, org.springframework.boot:spring-boot-starter-webflux, org.springframework:spring-beans, org.springframework:spring-webflux, org.springframework:spring-webmvc (GHSA-36p3-wjmg-h94x) | Tenable Self-Hosted Container Security | SCA Checks | 1/23/2025 | 7/2/2026 | critical |
| 159374 | Spring Framework < 5.2.20 / 5.3.x < 5.3.18 Remote Code Execution (CVE-2022-22965) | Nessus | Misc. | 3/31/2022 | 10/7/2024 | critical |
| 161952 | Dell Wyse Management Suite < 3.6.1 Multiple Vulnerabilities (DSA-2022-098) | Nessus | Windows | 6/8/2022 | 3/31/2026 | critical |
| 181988 | Amazon Linux 2 : tomcat (ALASTOMCAT8.5-2023-005) | Nessus | Amazon Linux Local Security Checks | 9/27/2023 | 12/11/2024 | critical |
| 163298 | Oracle WebLogic Server (Jul 2022 CPU) | Nessus | Misc. | 7/20/2022 | 1/4/2024 | critical |
| 159917 | Oracle MySQL Enterprise Monitor (Apr 2022 CPU) | Nessus | CGI abuses | 4/20/2022 | 10/23/2024 | critical |
| 253555 | Linux Distros Unpatched Vulnerability : CVE-2022-22965 | Nessus | Misc. | 8/22/2025 | 8/4/2026 | critical |
| 213099 | Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : Spring Framework vulnerability (USN-7165-1) | Nessus | Ubuntu Local Security Checks | 12/17/2024 | 12/19/2024 | critical |
| 164159 | Oracle Business Intelligence Publisher (OAS) (Jul 2022 CPU) | Nessus | Misc. | 8/17/2022 | 10/1/2025 | critical |
| 159542 | Spring Framework Spring4Shell (CVE-2022-22965) | Nessus | CGI abuses | 4/6/2022 | 3/23/2026 | critical |
| 182056 | Amazon Linux 2 : tomcat (ALASTOMCAT9-2023-004) | Nessus | Amazon Linux Local Security Checks | 9/27/2023 | 12/11/2024 | critical |
| 163328 | Oracle Primavera Gateway (Jul 2022 CPU) | Nessus | CGI abuses | 7/21/2022 | 10/24/2023 | critical |
