Firetruck

CVE-2022-22954

KEV · Ransomware
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

VMware Workspace ONE Access and Identity Manager allow for remote code execution due to server-side template injection.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
VMware Workspace ONE Access and Identity Managern/a / VMware Workspace ONE Access and Identity ManagerAccess 21.08.0.1, 21.08.0.0, 20.10.0.1, 20.10.0.0. Identity Manager 3.3.6, 3.3.5, 3.3.4, 3.3.3.affected