CVE-2022-31703

—

CVSS 3.1

7.5 high

EPSS

2%p77

Published

Dec 14, 2022 (Dec 14, 2022)

Modified

Jun 17, 2026

Description

The vRealize Log Insight contains a Directory Traversal Vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution.

Vendors: vmware
Products: vrealize log insight
Weakness: CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.8%)

In the news2 stories

Hackers Actively Exploiting Citrix ADC and Gateway Zero

The Hacker NewsDec 15, 00:00 UTC · Dec 15, 2022Exploit / PoC CVE-2022-27518 CVE-2021-22893 CVE-2022-42475+3 CVEs

VMware fixed critical VM Escape bug demonstrated at Geekpwn hacking contest

Security AffairsDec 14, 07:57 UTC · Dec 14, 2022Vulnerability CVE-2022-31705 CVE-2022-31702 CVE-2022-31703