CVE-2022-22954
KEV · RansomwareVMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability
View CVE record →- Vendor / Project
- VMware
- Product
- Workspace ONE Access and Identity Manager
- Date added
- Apr 14, 2022
- Due date
- May 5, 2022
- Known ransomware use
- Known
- CWEs
- CWE-94
Description
VMware Workspace ONE Access and Identity Manager allow for remote code execution due to server-side template injection.
Required action
Apply updates per vendor instructions.