CVE-2022-31659

—

CVSS 3.1

7.2 high

EPSS

3%p85

Published

Aug 5, 2022 (Aug 5, 2022)

Modified

Jun 17, 2026

Description

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability. A malicious actor with administrator and network access can trigger a remote code execution.

Vendors: vmware
Products: identity manager, one access, access connector, identity manager connector
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.7%)

In the news6 stories

Malicious code exploiting recent VMware bug publicly available, company warns

The RecordJan 11, 00:00 UTC · Jan 11, 2023Exploit / PoC in the wildCVE-2022-31656 CVE-2022-31659 CVE-2022-22972+1 CVEs

CISA urges defenders to update after VMware patches vulnerabilities in multiple products

The RecordJan 11, 00:00 UTC · Jan 11, 2023Vulnerability in the wildCVE-2022-31656 CVE-2022-31659 CVE-2021-44228

CVE-2022-31659

In the news6 stories

Malicious code exploiting recent VMware bug publicly available, company warns

CISA urges defenders to update after VMware patches vulnerabilities in multiple products

VMware warns of public PoC code for critical auth bypass bug CVE-2022

VMware: Patch this critical vulnerability immediately! (CVE-2022-31656)

VMware fixed critical authentication bypass vulnerability

VMware Releases Patches for Several New Flaws Affecting Multiple Products