Back to KEVs

CVE-2022-22954

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious...

Basic Information

CVE State: PUBLISHED
Reserved Date: January 10, 2022
Published Date: April 11, 2022
Last Updated: February 04, 2025
Vendor: n/a
Product: VMware Workspace ONE Access and Identity Manager
Description: VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious actor with network access can trigger a server-side template injection that may result in remote code execution.

CVSS Scores

CVSS v3.1

9.8 - CRITICAL

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC Information

Exploitation: active
Automatable: Yes
Technical Impact: total

Exploit Status

Exploited in the Wild: Yes (added 2022-04-14 00:00:00 UTC) Source
Proof of Concept Available: Yes (added 2022-08-13 18:00:04 UTC) Source
Used in Malware: Yes (added 2022-04-14 00:00:00 UTC) Source

References

https://www.vmware.com/security/advisories/VMSA-2022-0011.html http://packetstormsecurity.com/files/166935/VMware-Workspace-ONE-Access-Template-Injection-Command-Execution.html

Known Exploited Vulnerability Information

Source	Added Date
CISA	2022-04-14 00:00:00 UTC

Scanner Integrations

Scanner	URL	Date Detected
Metasploit	https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/vmware_workspace_one_access_cve_2022_22954.rb	2025-04-29 11:01:16 UTC
Nuclei	https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-22954.yaml	2025-04-26 00:00:00 UTC

Potential Proof of Concepts

Warning: These PoCs have not been tested and could contain malware. Use at your own risk.

vmware_workspace_one_access_cve_2022_22954

Type: metasploit • Created: Unknown

Metasploit module for CVE-2022-22954

amit-pathak009/CVE-2022-22954

Type: github • Created: 2022-08-13 18:00:04 UTC • Stars: 0

b4dboy17/CVE-2022-22954

Type: github • Created: 2022-06-03 09:17:12 UTC • Stars: 4

VMware Workspace ONE Access and Identity Manager RCE via SSTI. CVE-2022-22954 - PoC SSTI * exploit+payload+shodan (ну набором)

orwagodfather/CVE-2022-22954

Type: github • Created: 2022-06-03 08:51:44 UTC • Stars: 7

secfb/CVE-2022-22954

Type: github • Created: 2022-06-01 21:05:56 UTC • Stars: 0

Python script to exploit CVE-2022-22954 and then exploit CVE-2022-22960

Chocapikk/CVE-2022-22954

Type: github • Created: 2022-06-01 19:33:32 UTC • Stars: 2

Python script to exploit CVE-2022-22954 and then exploit CVE-2022-22960

MLX15/CVE-2022-22954

Type: github • Created: 2022-04-15 19:26:56 UTC • Stars: 4

CVE-2022-22954 VMware Workspace ONE Access free marker SSTI

bewhale/CVE-2022-22954

Type: github • Created: 2022-04-13 16:18:56 UTC • Stars: 71

CVE-2022-22954 VMware Workspace ONE Access freemarker SSTI 漏洞命令执行、批量检测脚本、文件写入

tunelko/CVE-2022-22954-PoC

Type: github • Created: 2022-04-13 08:52:15 UTC • Stars: 11

VMware Workspace ONE Access and Identity Manager RCE via SSTI - Test script for shodan, file or manual.

DrorDvash/CVE-2022-22954_VMware_PoC

Type: github • Created: 2022-04-12 21:15:27 UTC • Stars: 10

PoC for CVE-2022-22954 - VMware Workspace ONE Access Freemarker Server-Side Template Injection

mumu2020629/-CVE-2022-22954-scanner

Type: github • Created: 2022-04-12 08:36:33 UTC • Stars: 1

lucksec/VMware-CVE-2022-22954

Type: github • Created: 2022-04-12 06:35:10 UTC • Stars: 0

bb33bb/CVE-2022-22954-VMware-RCE

Type: github • Created: 2022-04-12 06:09:55 UTC • Stars: 1

CVE-2022-22954-VMware-RCE批量检测POC

jax7sec/CVE-2022-22954

Type: github • Created: 2022-04-12 04:14:36 UTC • Stars: 11

提供批量扫描URL以及执行命令功能。Workspace ONE Access 模板注入漏洞，可执行任意代码

aniqfakhrul/CVE-2022-22954

Type: github • Created: 2022-04-11 23:21:50 UTC • Stars: 5

Vulnmachines/VMWare_CVE-2022-22954

Type: github • Created: 2022-04-11 19:46:56 UTC • Stars: 11

CVE-2022-22954 is a server-side template injection vulnerability in the VMware Workspace ONE Access and Identity Manager

sherlocksecurity/VMware-CVE-2022-22954

Type: github • Created: 2022-04-11 13:59:23 UTC • Stars: 281

POC for VMWARE CVE-2022-22954

axingde/CVE-2022-22954-POC

Type: github • Created: 2020-10-09 10:14:50 UTC • Stars: 3

提供单个或批量URL扫描是否存在CVE-2022-22954功能