CVE-2022-31657

2022-08-0515:07:39

vmware

www.cve.org

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.8%

JSON

VMware Workspace ONE Access and Identity Manager contain a URL injection vulnerability. A malicious actor with network access may be able to redirect an authenticated user to an arbitrary domain.

CNA Affected

[
  {
    "product": "VMware Workspace ONE Access, Identity Manager and vRealize Automation",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Workspace One Access (21.08.0.1 & 21.08.0.0), Identity Manager (vIDM) (3.3.6, 3.3.5 & 3.3.4), and vRealize Automation 7.6"
      }
    ]
  }
]