← Database

CVE-2022-31657

CRITICAL CVSS: 9.8 Published: 2022-08-05 Modified: 2026-06-17

Description

VMware Workspace ONE Access and Identity Manager contain a URL injection vulnerability. A malicious actor with network access may be able to redirect an authenticated user to an arbitrary domain.

Affected Platforms

Microsoft WindowsVmware Identity ManagerVmware One AccessVmware Access ConnectorLinux Linux KernelVmware Identity Manager Connector

Weakness Type

CWE-601

References