← Database

CVE-2022-22959

MEDIUM CVSS: 4.3 Published: 2022-04-13 Modified: 2026-06-17

Description

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a cross site request forgery vulnerability. A malicious actor can trick a user through a cross site request forgery to unintentionally validate a malicious JDBC URI.

Affected Platforms

Vmware Cloud FoundationVmware Identity ManagerLinux Linux KernelVmware Vrealize AutomationVmware Workspace One AccessVmware Vrealize Suite Lifecycle Manager

Weakness Type

CWE-352

References