We would be interested in a response to whether or not any Esri products are vulnerable to the recently announced Spring Framework RCE CVE (https://spring.io/blog/2022/03/31/spring-framework-rce-early-announcement) and if so what mitigations / updates can be put in place to remediate the vulnerability.
So far, no information yet. The Security Team is still looking into the issue, Keep checking this Post for updates.