CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-22957

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities (CVE-2022-22957 & CVE-2022-22958). A malicious actor with administrative access can trigger deserialization of untrusted data through malicious JDBC URI which may result in remote code execution.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.437

EPSS Ranking 97.3%

CVSS Severity

CVSS v3 Score 7.2

CVSS v2 Score 6.5

References

Products affected by CVE-2022-22957

Vmware » Cloud Foundation » Version: 3.0

cpe:2.3:a:vmware:cloud_foundation:3.0
Vmware » Cloud Foundation » Version: 3.0.1

cpe:2.3:a:vmware:cloud_foundation:3.0.1
Vmware » Cloud Foundation » Version: 3.0.1.1

cpe:2.3:a:vmware:cloud_foundation:3.0.1.1
Vmware » Cloud Foundation » Version: 3.10

cpe:2.3:a:vmware:cloud_foundation:3.10
Vmware » Cloud Foundation » Version: 3.10.1

cpe:2.3:a:vmware:cloud_foundation:3.10.1
Vmware » Cloud Foundation » Version: 3.10.1.1

cpe:2.3:a:vmware:cloud_foundation:3.10.1.1
Vmware » Cloud Foundation » Version: 3.10.1.2

cpe:2.3:a:vmware:cloud_foundation:3.10.1.2
Vmware » Cloud Foundation » Version: 3.10.2.1

cpe:2.3:a:vmware:cloud_foundation:3.10.2.1
Vmware » Cloud Foundation » Version: 3.10.2.2

cpe:2.3:a:vmware:cloud_foundation:3.10.2.2
Vmware » Cloud Foundation » Version: 3.11

cpe:2.3:a:vmware:cloud_foundation:3.11
Vmware » Cloud Foundation » Version: 3.11.0.1

cpe:2.3:a:vmware:cloud_foundation:3.11.0.1
Vmware » Cloud Foundation » Version: 3.5

cpe:2.3:a:vmware:cloud_foundation:3.5
Vmware » Cloud Foundation » Version: 3.5.1

cpe:2.3:a:vmware:cloud_foundation:3.5.1
Vmware » Cloud Foundation » Version: 3.7

cpe:2.3:a:vmware:cloud_foundation:3.7
Vmware » Cloud Foundation » Version: 3.7.1

cpe:2.3:a:vmware:cloud_foundation:3.7.1
Vmware » Cloud Foundation » Version: 3.7.2

cpe:2.3:a:vmware:cloud_foundation:3.7.2
Vmware » Cloud Foundation » Version: 3.8

cpe:2.3:a:vmware:cloud_foundation:3.8
Vmware » Cloud Foundation » Version: 3.8.1

cpe:2.3:a:vmware:cloud_foundation:3.8.1
Vmware » Cloud Foundation » Version: 3.9

cpe:2.3:a:vmware:cloud_foundation:3.9
Vmware » Cloud Foundation » Version: 3.9.1

cpe:2.3:a:vmware:cloud_foundation:3.9.1
Vmware » Cloud Foundation » Version: 4.0

cpe:2.3:a:vmware:cloud_foundation:4.0
Vmware » Cloud Foundation » Version: 4.0.1

cpe:2.3:a:vmware:cloud_foundation:4.0.1
Vmware » Cloud Foundation » Version: 4.1

cpe:2.3:a:vmware:cloud_foundation:4.1
Vmware » Cloud Foundation » Version: 4.1.0.1

cpe:2.3:a:vmware:cloud_foundation:4.1.0.1
Vmware » Cloud Foundation » Version: 4.2

cpe:2.3:a:vmware:cloud_foundation:4.2
Vmware » Cloud Foundation » Version: 4.2.1

cpe:2.3:a:vmware:cloud_foundation:4.2.1
Vmware » Cloud Foundation » Version: 4.3

cpe:2.3:a:vmware:cloud_foundation:4.3
Vmware » Cloud Foundation » Version: 4.3.1

cpe:2.3:a:vmware:cloud_foundation:4.3.1
Vmware » Cloud Foundation » Version: 4.3.11

cpe:2.3:a:vmware:cloud_foundation:4.3.11
Vmware » Cloud Foundation » Version: 4.4

cpe:2.3:a:vmware:cloud_foundation:4.4
Vmware » Cloud Foundation » Version: 4.4.1

cpe:2.3:a:vmware:cloud_foundation:4.4.1
Vmware » Cloud Foundation » Version: 4.4.1.1

cpe:2.3:a:vmware:cloud_foundation:4.4.1.1
Vmware » Cloud Foundation » Version: 4.5

cpe:2.3:a:vmware:cloud_foundation:4.5
Vmware » Cloud Foundation » Version: 4.5.1

cpe:2.3:a:vmware:cloud_foundation:4.5.1
Vmware » Cloud Foundation » Version: 4.5.2

cpe:2.3:a:vmware:cloud_foundation:4.5.2
Vmware » Identity Manager » Version: 3.3.3

cpe:2.3:a:vmware:identity_manager:3.3.3
Vmware » Identity Manager » Version: 3.3.4

cpe:2.3:a:vmware:identity_manager:3.3.4
Vmware » Identity Manager » Version: 3.3.5

cpe:2.3:a:vmware:identity_manager:3.3.5
Vmware » Identity Manager » Version: 3.3.6

cpe:2.3:a:vmware:identity_manager:3.3.6
Vmware » Vrealize Automation » Version: 7.6

cpe:2.3:a:vmware:vrealize_automation:7.6
Vmware » Vrealize Automation » Version: 8.0

cpe:2.3:a:vmware:vrealize_automation:8.0
Vmware » Vrealize Automation » Version: 8.1

cpe:2.3:a:vmware:vrealize_automation:8.1
Vmware » Vrealize Automation » Version: 8.2

cpe:2.3:a:vmware:vrealize_automation:8.2
Vmware » Vrealize Automation » Version: 8.3

cpe:2.3:a:vmware:vrealize_automation:8.3
Vmware » Vrealize Automation » Version: 8.4

cpe:2.3:a:vmware:vrealize_automation:8.4
Vmware » Vrealize Automation » Version: 8.5

cpe:2.3:a:vmware:vrealize_automation:8.5
Vmware » Vrealize Automation » Version: 8.6

cpe:2.3:a:vmware:vrealize_automation:8.6
Vmware » Vrealize Suite Lifecycle Manager » Version: 8.0

cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.0
Vmware » Vrealize Suite Lifecycle Manager » Version: 8.0.1

cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.0.1
Vmware » Vrealize Suite Lifecycle Manager » Version: 8.1

cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.1
Vmware » Vrealize Suite Lifecycle Manager » Version: 8.2

cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.2
Vmware » Vrealize Suite Lifecycle Manager » Version: 8.3

cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.3
Vmware » Vrealize Suite Lifecycle Manager » Version: 8.4

cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.4
Vmware » Vrealize Suite Lifecycle Manager » Version: 8.4.1

cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.4.1
Vmware » Vrealize Suite Lifecycle Manager » Version: 8.6

cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.6
Vmware » Vrealize Suite Lifecycle Manager » Version: 8.6.1

cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.6.1
Vmware » Vrealize Suite Lifecycle Manager » Version: 8.6.2

cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.6.2
Vmware » Vrealize Suite Lifecycle Manager » Version: 8.7

cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.7
Vmware » Vrealize Suite Lifecycle Manager » Version: 8.8

cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.8
Vmware » Workspace One Access » Version: 20.10.0.0

cpe:2.3:a:vmware:workspace_one_access:20.10.0.0
Vmware » Workspace One Access » Version: 20.10.0.1

cpe:2.3:a:vmware:workspace_one_access:20.10.0.1
Vmware » Workspace One Access » Version: 21.08.0.0

cpe:2.3:a:vmware:workspace_one_access:21.08.0.0
Vmware » Workspace One Access » Version: 21.08.0.1

cpe:2.3:a:vmware:workspace_one_access:21.08.0.1
Linux » Linux Kernel » Version: N/A

cpe:2.3:o:linux:linux_kernel:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-22957

Products

Pricing

Contact Us