Cyber threats / Vulnerabilities

CVE-2022-22954

VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability
100.0%
EPSS
100%
Percentile
Yes
Known exploited
0
APAC news · 90d
Summary

VMware Workspace ONE Access and Identity Manager allow for remote code execution due to server-side template injection.

Vendor
VMware
Product
Workspace ONE Access and Identity Manager
Added to KEV
Apr 14, 2022
Remediation due
May 5, 2022 (US federal deadline)
Ransomware use
Known
Weakness
CWE-94
EPSS
100.0% as of Nov 12
In the news
  • No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
  • none recorded
References