CVE

CVE-2022-22954

P1⬤ KNOWN RANSOMWARE USE

VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability

VMware · Workspace ONE Access and Identity Manager

Date added (CISA)

2022-04-14

Remediation due

2022-05-05

Known ransomware use

Yes

Remediation priority

P1 — known ransomware use · past CISA due date

Description

VMware Workspace ONE Access and Identity Manager allow for remote code execution due to server-side template injection.