Actively exploited
Listed in CISA’s Known Exploited Vulnerabilities catalog since April 14, 2022.
CVE-2022-22954
VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability
VMware · Workspace ONE Access and Identity Manager
Added to KEV April 14, 2022
Alert details
- Source feed
- CISA KEV
- CVE ID
- CVE-2022-22954
- CWE
- CWE-94
- Affected products
- Workspace ONE Access and Identity Manager · VMware Workspace ONE Access and Identity Manager · VMware
What happened
VMware Workspace ONE Access and Identity Manager allow for remote code execution due to server-side template injection.
What it means for your business
VMware Workspace ONE Access and Identity Manager is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2022-22954). VMware Workspace ONE Access and Identity Manager allow for remote code execution due to server-side template injection. CISA remediation due date: 2022-05-05. If you need help checking exposure, call (864) 335-9223.
Required action
Apply updates per vendor instructions.
CISA due date: May 5, 2022
Sources
Related briefs
North Korean IT Workers Expanding Use of Facilitators, Broadening Recruitment
North Korean IT Workers Expanding Use of Facilitators, Broadening Recruitment — FBI IC3 industry advisory relevant to cyber risk. PremierePC monitors federal alerts for Upstate SC businesses. Read the source link for full guidance or open a ticket if you want help assessing impact.
- Vendor:FBI IC3
Windows Internet Information Services Denial of Service vulnerability
Windows Internet Information Services Denial of Service vulnerability (CVE-2026-97830) was added to Microsoft’s security update guidance. <p>Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.</p> If you need help checking exposure, call (864) 335-9223.
Microsoft OpenSSH for Windows Remote Code Execution vulnerability
Microsoft OpenSSH for Windows Remote Code Execution vulnerability (CVE-2026-97816) was added to Microsoft’s security update guidance. <p>Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.</p> If you need help checking exposure, call (864) 335-9223.
Windows Error Reporting Remote Code Execution vulnerability
Windows Error Reporting Remote Code Execution vulnerability (CVE-2026-97815) was added to Microsoft’s security update guidance. <p>Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.</p> If you need help checking exposure, call (864) 335-9223.
Need help patching?
PremierePC monitors KEV alerts for managed clients and helps teams prioritize remediation before attackers do.