CVE-2022-31700

HIGH

VMware Workspace ONE Access and Identity Manager - Authenticated Remote Code Execution

Title source: llm

Description

VMware Workspace ONE Access and Identity Manager contain an authenticated remote code execution vulnerability. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 7.2.

References (1)

Core 1

Core References

Vendor Advisory

https://www.vmware.com/security/advisories/VMSA-2022-0032.html

Scores

CVSS v3 7.2

EPSS 0.0127

EPSS Percentile 79.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact total

Details

Status published

Products (4)

vmware/access 21.08.0.0

vmware/access 21.08.0.1

vmware/cloud_foundation

vmware/identity_manager 3.3.6

Published Dec 14, 2022

Tracked Since Feb 18, 2026