CVE-2022-31710

2023-01-2500:00:00

vmware

www.cve.org

vrealize log insight

deserialization vulnerability

unauthenticated actor

denial of service

cve-2022-31710

0.001 Low

EPSS

Percentile

40.2%

JSON

vRealize Log Insight contains a deserialization vulnerability. An unauthenticated malicious actor can remotely trigger the deserialization of untrusted data which could result in a denial of service.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "vRealize Log Insight (vRLI)",
    "versions": [
      {
        "version": "vRealize Log Insight 8.10.1 and prior",
        "status": "affected"
      }
    ]
  }
]

References

www.vmware.com/security/advisories/VMSA-2023-0001.html

0.001 Low

EPSS

Percentile

40.2%

JSON

Related for CVELIST:CVE-2022-31710