CVE-2022-31710

—

CVSS 3.1

7.5 high

EPSS

1%p72

Published

Jan 26, 2023 (Jan 26, 2023)

Modified

Jun 17, 2026

Description

vRealize Log Insight contains a deserialization vulnerability. An unauthenticated malicious actor can remotely trigger the deserialization of untrusted data which could result in a denial of service.

Vendors: vmware
Products: vrealize log insight
Weakness: CWE-502
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news6 stories

Critical VMware vRealize Log Insight flaws patched (CVE-2022-31706, CVE-2022-31704)

Help Net SecurityApr 24, 11:02 UTC · Apr 24, 2023Vulnerability CVE-2022-31706 CVE-2022-31704 CVE-2022-31710+1 CVEs1

VMware Releases Patches for Critical vRealize Log Insight Software Vulnerabilities

The Hacker NewsFeb 1, 02:51 UTC · Feb 1, 2023Vulnerability in the wildCVE-2022-31706 CVE-2022-31704 CVE-2022-31710+1 CVEs

Experts released VMware vRealize Log RCE exploit

Security AffairsJan 31, 18:44 UTC · Jan 31, 2023Vulnerability in the wildCVE-2022-31706 CVE-2022-31704 CVE-2022-31710+1 CVEs1

Experts plans to release VMware vRealize Log RCE exploit

Security AffairsJan 31, 16:55 UTC · Jan 31, 2023Vulnerability in the wildCVE-2022-31706 CVE-2022-31704 CVE-2022-31710+1 CVEs

Week in review: ChatGPT cybersecurity, critical RCE vulnerabilities found in git, Riot Games breached

Help Net SecurityJan 29, 00:00 UTC · Jan 29, 2023Data breach CVE-2022-42856 CVE-2022-31706 CVE-2022-31704+3 CVEs

Critical code execution bugs in WMware vRealize Log Insight

Security AffairsJan 24, 23:25 UTC · Jan 24, 2023Vulnerability CVE-2022-31706 CVE-2022-31704 CVE-2022-31710+1 CVEs1