{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T10:24:15Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","cve":{"id":"CVE-2022-22965","kev":true,"kev_added_at":"2022-04-04","epss":{"score":0.99677,"percentile":0.99949,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"}},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"advisory_count":1,"visible_product_count":12,"public_evidence_count":12,"kev":true},"advisories":[{"id":"cisco-sa-java-spring-rce-Zx9GUc67","slug":"cisco-sa-java-spring-rce-zx9guc67","title":"Vulnerability in Spring Framework Affecting Cisco Products: March 2022","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67"}],"public_evidence":[{"product":{"name":"Cisco Evolved Programmable Network Manager (EPNM)","slug":"cisco-evolved-programmable-network-manager-epnm","vendor":"Cisco"},"advisory":{"id":"cisco-sa-java-spring-rce-Zx9GUc67","slug":"cisco-sa-java-spring-rce-zx9guc67","title":"Vulnerability in Spring Framework Affecting Cisco Products: March 2022","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:58:40Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Evolved Programmable Network Manager (EPNM)","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":true,"epss":{"score":0.99677,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2022-04-01T23:45:00Z","updated_at":"2023-02-09T15:14:14Z","advisory_updated_at":"2023-02-09T15:14:14Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67"},"row_display_order":1},{"product":{"name":"Cisco Unified Communications Manager","slug":"cisco-unified-communications-manager","vendor":"Cisco"},"advisory":{"id":"cisco-sa-java-spring-rce-Zx9GUc67","slug":"cisco-sa-java-spring-rce-zx9guc67","title":"Vulnerability in Spring Framework Affecting Cisco Products: March 2022","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:58:40Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Unified Communications Manager","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":true,"epss":{"score":0.99677,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2022-04-01T23:45:00Z","updated_at":"2023-02-09T15:14:14Z","advisory_updated_at":"2023-02-09T15:14:14Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67"},"row_display_order":2},{"product":{"name":"Cisco Emergency Responder","slug":"cisco-emergency-responder","vendor":"Cisco"},"advisory":{"id":"cisco-sa-java-spring-rce-Zx9GUc67","slug":"cisco-sa-java-spring-rce-zx9guc67","title":"Vulnerability in Spring Framework Affecting Cisco Products: March 2022","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:58:40Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Emergency Responder","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":true,"epss":{"score":0.99677,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2022-04-01T23:45:00Z","updated_at":"2023-02-09T15:14:14Z","advisory_updated_at":"2023-02-09T15:14:14Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67"},"row_display_order":3},{"product":{"name":"Cisco Unity Connection","slug":"cisco-unity-connection","vendor":"Cisco"},"advisory":{"id":"cisco-sa-java-spring-rce-Zx9GUc67","slug":"cisco-sa-java-spring-rce-zx9guc67","title":"Vulnerability in Spring Framework Affecting Cisco Products: March 2022","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:58:40Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Unity Connection","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":true,"epss":{"score":0.99677,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2022-04-01T23:45:00Z","updated_at":"2023-02-09T15:14:14Z","advisory_updated_at":"2023-02-09T15:14:14Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67"},"row_display_order":4},{"product":{"name":"Cisco Unified Communications Manager / Cisco Unity Connection","slug":"cisco-unified-communications-manager-cisco-unity-connection","vendor":"Cisco"},"advisory":{"id":"cisco-sa-java-spring-rce-Zx9GUc67","slug":"cisco-sa-java-spring-rce-zx9guc67","title":"Vulnerability in Spring Framework Affecting Cisco Products: March 2022","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:58:40Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Unified Communications Manager / Cisco Unity Connection","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":true,"epss":{"score":0.99677,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2022-04-01T23:45:00Z","updated_at":"2023-02-09T15:14:14Z","advisory_updated_at":"2023-02-09T15:14:14Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67"},"row_display_order":5},{"product":{"name":"Cisco HyperFlex HX Data Platform","slug":"cisco-hyperflex-hx-data-platform","vendor":"Cisco"},"advisory":{"id":"cisco-sa-java-spring-rce-Zx9GUc67","slug":"cisco-sa-java-spring-rce-zx9guc67","title":"Vulnerability in Spring Framework Affecting Cisco Products: March 2022","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:58:40Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco HyperFlex HX Data Platform","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":true,"epss":{"score":0.99677,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2022-04-01T23:45:00Z","updated_at":"2023-02-09T15:14:14Z","advisory_updated_at":"2023-02-09T15:14:14Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67"},"row_display_order":6},{"product":{"name":"Cisco Unified Communications Manager IM and Presence Service","slug":"cisco-unified-communications-manager-im-and-presence-service","vendor":"Cisco"},"advisory":{"id":"cisco-sa-java-spring-rce-Zx9GUc67","slug":"cisco-sa-java-spring-rce-zx9guc67","title":"Vulnerability in Spring Framework Affecting Cisco Products: March 2022","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:58:40Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Unified Communications Manager IM and Presence Service","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":true,"epss":{"score":0.99677,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2022-04-01T23:45:00Z","updated_at":"2023-02-09T15:14:14Z","advisory_updated_at":"2023-02-09T15:14:14Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67"},"row_display_order":7},{"product":{"name":"Cisco IoT Field Network Director (IoT-FND)","slug":"cisco-iot-field-network-director-iot-fnd","vendor":"Cisco"},"advisory":{"id":"cisco-sa-java-spring-rce-Zx9GUc67","slug":"cisco-sa-java-spring-rce-zx9guc67","title":"Vulnerability in Spring Framework Affecting Cisco Products: March 2022","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:58:40Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco IoT Field Network Director (IoT-FND)","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":true,"epss":{"score":0.99677,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2022-04-01T23:45:00Z","updated_at":"2023-02-09T15:14:14Z","advisory_updated_at":"2023-02-09T15:14:14Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67"},"row_display_order":8},{"product":{"name":"Cisco Prime License Manager","slug":"cisco-prime-license-manager","vendor":"Cisco"},"advisory":{"id":"cisco-sa-java-spring-rce-Zx9GUc67","slug":"cisco-sa-java-spring-rce-zx9guc67","title":"Vulnerability in Spring Framework Affecting Cisco Products: March 2022","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:58:40Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Prime License Manager","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":true,"epss":{"score":0.99677,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2022-04-01T23:45:00Z","updated_at":"2023-02-09T15:14:14Z","advisory_updated_at":"2023-02-09T15:14:14Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67"},"row_display_order":9},{"product":{"name":"Cisco Secure Firewall Threat Defense (FTD) Software","slug":"cisco-secure-firewall-threat-defense-ftd-software","vendor":"Cisco"},"advisory":{"id":"cisco-sa-java-spring-rce-Zx9GUc67","slug":"cisco-sa-java-spring-rce-zx9guc67","title":"Vulnerability in Spring Framework Affecting Cisco Products: March 2022","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:58:40Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Secure Firewall Threat Defense (FTD) Software","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":true,"epss":{"score":0.99677,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2022-04-01T23:45:00Z","updated_at":"2023-02-09T15:14:14Z","advisory_updated_at":"2023-02-09T15:14:14Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67"},"row_display_order":10},{"product":{"name":"Cisco Secure Firewall Management Center (FMC)","slug":"cisco-secure-firewall-management-center-fmc","vendor":"Cisco"},"advisory":{"id":"cisco-sa-java-spring-rce-Zx9GUc67","slug":"cisco-sa-java-spring-rce-zx9guc67","title":"Vulnerability in Spring Framework Affecting Cisco Products: March 2022","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:58:40Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Secure Firewall Management Center (FMC)","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":true,"epss":{"score":0.99677,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2022-04-01T23:45:00Z","updated_at":"2023-02-09T15:14:14Z","advisory_updated_at":"2023-02-09T15:14:14Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67"},"row_display_order":11},{"product":{"name":"Cisco Prime Collaboration Deployment","slug":"cisco-prime-collaboration-deployment","vendor":"Cisco"},"advisory":{"id":"cisco-sa-java-spring-rce-Zx9GUc67","slug":"cisco-sa-java-spring-rce-zx9guc67","title":"Vulnerability in Spring Framework Affecting Cisco Products: March 2022","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:58:40Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Prime Collaboration Deployment","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":true,"epss":{"score":0.99677,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2022-04-01T23:45:00Z","updated_at":"2023-02-09T15:14:14Z","advisory_updated_at":"2023-02-09T15:14:14Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67"},"row_display_order":12}]}