H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Vulnerability

CVE-2022-22954

VMware Workspace ONE Access and Identity Manager allow for remote code execution due to server-side template injection.

Vulnerability
TypeVulnerability
External ID—
First seen2022-04-14
Last seen2022-04-14

Confidence

—

VMware Workspace ONE Access and Identity Manager allow for remote code execution due to server-side template injection.

Labels

exploitedkevransomware

CISA KEV context

Vendor / productVMware Workspace ONE Access and Identity Manager
Added2022-04-14
Due date2022-05-05
4 recorded

Relationships

mitigates
from Remediate CVE-2022-22954
Mitigation
related-to
to Code Injection
Technique
related-to
to Leverage Executable Code in Non-Executable Files
Technique
related-to
to Manipulating User-Controlled Variables
Technique
2 external

References

nvd
CVE-2022-22954
open
cwe
CWE-94
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance