Addressing the Spring4Shell and CVE-2022-22963 RCE vulnerabilities in cloud environments

### Executive Summary This report details two critical RCE vulnerabilities affecting Spring Framework (CVE-2022-22965, “Spring4Shell”) and Spring Cloud Function (CVE-2022-22963), explains exploitation prerequisites and mitigations, provides detection and prioritization guidance for cloud environments (including Wiz scanning capabilities), and presents prevalence data indicating roughly 63% of cloud environments contain the Spring4Shell-vulnerable version though many instances may not be practically exploitable.