← Database

CVE-2022-22957

HIGH CVSS: 7.2 Published: 2022-04-13 Modified: 2026-06-17

Description

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities (CVE-2022-22957 & CVE-2022-22958). A malicious actor with administrative access can trigger deserialization of untrusted data through malicious JDBC URI which may result in remote code execution.

Affected Platforms

Vmware Cloud FoundationVmware Identity ManagerLinux Linux KernelVmware Vrealize AutomationVmware Workspace One AccessVmware Vrealize Suite Lifecycle Manager

Weakness Type

CWE-502

References