Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
VMware Workspace ONE Access SSTI (CVE-2022-22954) - Vulnerability Database

VMware Workspace ONE Access SSTI (CVE-2022-22954)

Description

VMware Workspace ONE Access is vulnerable to server side template injection, which could be used for remote code execution.

Remediation

Upgrade to the latest version of VMware Workspace ONE Access

References

VMSA-2022-0011: Questions and Answers

Related Vulnerabilities

Server-Side Template Injection Critical
Common tags: Server Side Template Injection Code Execution
CrushFTP SSTI (CVE-2024-4040) Critical
Common tags: Server Side Template Injection Code Execution
Spring Boot Whitelabel Error Page SpEL High
Common tags: Server Side Template Injection Code Execution
Drupal Core 7.x Remote Code Execution (7.0 - 7.58) High
Common tags: Code Execution
Drupal Core 8.x.x Remote Code Execution (8.0.0 - 8.4.8) High
Common tags: Code Execution

Severity

High

Classification

CVE-2022-22954
CWE-94
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Tags

Server Side Template Injection
Code Execution