Live › vulnerability › CVE-2022-22954
Go to dashboardVMware Workspace ONE Access and Identity Manager contain a server-side template injection flaw that lets remote parties run code on the server. The flaw is actively exploited in the wild and has been tied to ransomware campaigns.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| VMware Workspace ONE Access and Identity Manager | vendor | – | – |
Unknown from the sources.
Apply the VMware updates per vendor instructions, as CISA requires; the specific patched versions are not stated in the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious actor with network access can trigger a server-side template injection that may result in remote code execution.
This page as .md · .json · in your agent: get_signal("CVE-2022-22954")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.