CVE-2022-22958

🗓️ 13 Apr 2022 17:05:58Reported by vmwareType

VMware Workspace ONE Access, Identity Manager and vRealize Automation - remote code execution vulnerabilitie

Reporter	Title	Published	Views	Family All 33
0day.today	VMware Workspace ONE Remote Code Execution Exploit	18 Apr 202300:00	–	zdt
ATTACKERKB	CVE-2022-22958	13 Apr 202218:15	–	attackerkb
BDU FSTEC	The vulnerability of the VMware Workspace ONE Access application management platform, the VMware vRealize Automation virtual infrastructure management tool, the VMware Identity Manager (vIDM) administration consoles, the VMware Cloud Foundation virtualization platform, and the vRealize Suite Lifecycle Manager software for application lifecycle management, is related to deficiencies in the deserialization mechanism, allowing an attacker to execute arbitrary code.	13 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the VMware Workspace ONE Access application management platform, the VMware vRealize Automation virtual infrastructure management tool, the VMware Identity Manager (vIDM) administration consoles, the VMware Cloud Foundation virtualization platform, and the vRealize Suite Lifecycle Manager software for application lifecycle management, is related to deficiencies in the deserialization mechanism, allowing an attacker to execute arbitrary code.	13 Apr 202200:00	–	bdu_fstec
Circl	CVE-2022-22957	7 Apr 202204:00	–	circl
Circl	CVE-2022-22958	7 Apr 202204:00	–	circl
CNNVD	多款 VMware 产品代码问题漏洞	6 Apr 202200:00	–	cnnvd
CNNVD	多款 VMware 产品代码问题漏洞	6 Apr 202200:00	–	cnnvd
CVE	CVE-2022-22957	13 Apr 202200:00	–	cve
Cvelist	CVE-2022-22957	13 Apr 202200:00	–	cvelist

NVD

Node

vmware cloud_foundationRange3.0–5.0

vmware identity_managerMatch3.3.3

vmware identity_managerMatch3.3.4

vmware identity_managerMatch3.3.5

vmware identity_managerMatch3.3.6

vmware vrealize_automationRange8.0–9.0

vmware vrealize_automationMatch7.6

vmware vrealize_suite_lifecycle_managerRange8.0–9.0

vmware workspace_one_accessMatch20.10.0.0

vmware workspace_one_accessMatch20.10.0.1

vmware workspace_one_accessMatch21.08.0.0

vmware workspace_one_accessMatch21.08.0.1

AND

linux linux_kernelMatch-

[
  {
    "product": "VMware Workspace ONE Access, Identity Manager and vRealize Automation.",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Access 21.08.0.1, 21.08.0.0, 20.10.0.1, 20.10.0.0. Identity Manager 3.3.6, 3.3.5, 3.3.4, 3.3.3. vRealize Automation 7.6."
      }
    ]
  }
]

Source	Link
vmware	www.vmware.com/security/advisories/VMSA-2022-0011.html

17 Jun 2026 04:29Current

8.6High risk

Vulners AI Score8.6

CVSS 26.5

CVSS 3.17.2

EPSS0.23084