CVE-2022-31700

Severity: high (CVSS 7.2 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-12-14 · updated 2026-06-17

Description

VMware Workspace ONE Access and Identity Manager contain an authenticated remote code execution vulnerability. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 7.2.

Affected products

VMware Access: 21.08.0.0, 21.08.0.1
VMware Cloud Foundation: all versions
VMware Identity Manager: 3.3.6
VMware Workspace ONE Access (Access), VMware Identity Manager (vIDM): VMware Workspace ONE Access (Multiple Versions)

References

https://www.vmware.com/security/advisories/VMSA-2022-0032.html
https://www.vmware.com/security/advisories/VMSA-2022-0032.html

Get alerted when CVE-2022-31700 or the next vulnerability affects your stack