← Database

CVE-2022-22954

CRITICAL CVSS: 9.8 Published: 2022-04-11 Modified: 2026-06-17

Description

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious actor with network access can trigger a server-side template injection that may result in remote code execution.

Affected Platforms

Vmware Cloud FoundationVmware Identity ManagerLinux Linux KernelVmware Workspace One AccessVmware Vrealize Suite Lifecycle ManagerVmware Vrealize Automation

Weakness Type

CWE-94, CWE-94

References