CVE-2022-22954

🔥 Known Exploited (CISA KEV)CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2022-04-11

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious actor with network access can trigger a server-side template injection that may result in remote code execution.

Affected Platforms (CPE)

📦

Vmware

Identity Manager

= 3.3.3= 3.3.4= 3.3.5= 3.3.6

📦

Vmware

Vrealize Automation

= 7.6

📦

Vmware

Workspace One Access

= 20.10.0.0= 20.10.0.1= 21.08.0.0= 21.08.0.1

📦

Vmware

Cloud Foundation

>= 4.0 and <= 4.3.1

References & Advisories

🔗 http://packetstormsecurity.com/files/166935/VMware-Workspace-ONE-Access-Template-Injection-Command-Execution.html

🔗 https://www.vmware.com/security/advisories/VMSA-2022-0011.html

🔗 http://packetstormsecurity.com/files/166935/VMware-Workspace-ONE-Access-Template-Injection-Command-Execution.html

🔗 https://www.vmware.com/security/advisories/VMSA-2022-0011.html

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-22954

CVE-2022-22954

Vulnerability Description

Affected Platforms (CPE)

Identity Manager

Vrealize Automation

Workspace One Access

Cloud Foundation

References & Advisories

Related Security Intelligence Articles

Global Cyber Intel Digest: July 21, 2026

Related Vulnerabilities