CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2022-04-11
VMware Workspace ONE Access and Identity Manager Server-Side Template Injection (SSTI) Remote Code Execution Vulnerability (CVE-2022-22954) Analysis and Mitigation Guide
[Affected Scope] Specific versions of VMware Workspace ONE Access and Identity Manager
[Impact] Unauthenticated remote attackers with network access can execute arbitrary system commands on the target server, posing a critical risk (CVSS 9.8)
[Mitigation] Immediately apply the official security patches (VMSA-2022-0011) or implement temporary workarounds to restrict external access