VulnerabilitycriticalExploited in the wild

VMware Releases Critical Patches for New Vulnerabilities Affecting Multiple Products

The Hacker Newsby @TheHackersNewsApr 7, 2022 · 05:49 UTC (Apr 7, 2022)2 min read2 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2022-22954 CVE-2022-22961 CVE-2022-22955 CVE-2022-22956 CVE-2022-22957 CVE-2022-22958 CVE-2022-22959 CVE-2022-22960

Tags: cve-2022-22954 cve-2022-22961 cve-2022-22955 cve-2022-22956 cve-2022-22957 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-22954	Server-Side Template Injection RCE in VMware Workspace ONE Access and Identity Manager	9.8	100%	KEVRansomwarePoC	Apr 11, 2022 KEV Apr 14, 2022
CVE-2022-22956 +1 related CVE CVE-2022-22955	VMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE-2022-22956) in the OAuth2 ACS framework	9.8	50%		Apr 13, 2022
CVE-2022-22957 +3 related CVEs CVE-2022-22958 CVE-2022-22961 CVE-2022-22959	VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities (CVE-2022-22957 & CVE-2022-22958)	7.2 group max	24%		Apr 13, 2022
CVE-2022-22960	Local Privilege Escalation in VMware Workspace ONE Access, Identity Manager and vRA	7.8	36%	KEVPoC ×3	Apr 13, 2022 KEV Apr 15, 2022

From the original article

2 min read at thehackernews.com

VMware has released security updates to patch eight vulnerabilities spanning its products, some of which could be exploited to launch remote code execution attacks. Tracked from CVE-2022-22954 to CVE-2022-22961 (CVSS scores: 5. 3 - 9.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.