NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

Vulnerability3 · 1 read

CVE-2022-22973

CVSS 3.1: 7.8 high
EPSS: 2%p83
Published: May 20, 2022 · May 20, 2022
Modified: Jun 17, 2026

Analyze CVE-2022-22973 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

VMware Workspace ONE Access and Identity Manager contain a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'.

Vendors: vmware

Products: identity manager, workspace one access, cloud foundation, vrealize suite lifecycle manager

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.4%)

In the news

9 stories

Threat Brief: VMware Vulnerabilities Exploited in the Wild (CVE-2022

Palo Alto Unit 42Jun 5, 20:43 UTC · Jun 5, 2024Exploit / PoCExploitedCVE-2022-22954 CVE-2022-22960 CVE-2022-22972+82 · 2 reads

60

VMware issues critical fixes, CISA orders federal agencies to act immediately (CVE-2022-22972)

Help Net SecurityJan 11, 11:31 UTC · Jan 11, 2024VulnerabilityExploitedCVE-2022-22972 CVE-2022-22973 CVE-2022-22954+1

60

CISA issues directive for exploited VMware bug after IR team deployed to ‘large’ org

The RecordJan 12, 00:00 UTC · Jan 12, 2023RansomwareExploitedCVE-2022-22954 CVE-2022-22972 CVE-2022-22973+13

60

Malicious code exploiting recent VMware bug publicly available, company warns

The RecordJan 11, 00:00 UTC · Jan 11, 2023Exploit / PoCExploitedCVE-2022-31656 CVE-2022-31659 CVE-2022-22972+12

60

Experts released PoC exploit code for VMware CVE-2022

Security AffairsMay 27, 05:58 UTC · May 27, 2022Exploit / PoCCVE-2022-22972 CVE-2022-229732 · 1 read

60

CISA orders federal agencies to fix VMware flaws by May 23, 2022

Security AffairsMay 19, 06:13 UTC · May 19, 2022Exploit / PoCCVE-2022-22972 CVE-2022-22973 CVE-2022-22954+12 · 1 read

60

VMware Releases Patches for New Vulnerabilities Affecting Multiple Products

The Hacker NewsMay 19, 05:48 UTC · May 19, 2022VulnerabilityExploitedCVE-2022-22972 CVE-2022-22973 CVE-2022-22954+34 · 1 read

60

VMware fixed a critical auth bypass issue in some of its products

Security AffairsMay 18, 21:29 UTC · May 18, 2022Exploit / PoCExploitedCVE-2022-22972 CVE-2022-229733 · 2 reads

60

CISA Issues Emergency Directive for VMware Vulnerabilities

Infosecurity MagazineMay 19, 17:30 UTC · May 19, 2022VulnerabilityCVE-2022-22972 CVE-2022-22973 CVE-2022-22954+13

47