NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

Vulnerability3 · 1 read

CVE-2022-31659

CVSS 3.1: 7.2 high
EPSS: 3%p85
Published: Aug 5, 2022 · Aug 5, 2022
Modified: Jun 17, 2026

Analyze CVE-2022-31659 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability. A malicious actor with administrator and network access can trigger a remote code execution.

Vendors: vmware

Products: identity manager, one access, access connector, identity manager connector

Weakness: CWE-89

Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.7%)

In the news

6 stories

Malicious code exploiting recent VMware bug publicly available, company warns

The RecordJan 11, 00:00 UTC · Jan 11, 2023Exploit / PoCExploitedCVE-2022-31656 CVE-2022-31659 CVE-2022-22972+12

60

CISA urges defenders to update after VMware patches vulnerabilities in multiple products

The RecordJan 11, 00:00 UTC · Jan 11, 2023VulnerabilityExploitedCVE-2022-31656 CVE-2022-31659 CVE-2021-442281

60

VMware warns of public PoC code for critical auth bypass bug CVE-2022

Security AffairsAug 10, 07:46 UTC · Aug 10, 2022Exploit / PoCCVE-2022-31656 CVE-2022-316592 · 1 read

60

VMware: Patch this critical vulnerability immediately! (CVE-2022-31656)

Help Net SecurityAug 10, 07:33 UTC · Aug 10, 2022VulnerabilityCVE-2022-31656 CVE-2022-22972 CVE-2022-31659+81

60

VMware fixed critical authentication bypass vulnerability

Security AffairsAug 9, 22:51 UTC · Aug 9, 2022VulnerabilityCVE-2022-31656 CVE-2022-31657 CVE-2022-31658+72 · 1 read

60

VMware Releases Patches for Several New Flaws Affecting Multiple Products

The Hacker NewsAug 3, 08:25 UTC · Aug 3, 2022VulnerabilityCVE-2022-31656 CVE-2022-31665 CVE-2022-31658+72

47