{"basis":"claimed","id":"CVE-2022-22958","name":"VMware Workspace ONE Access, Identity Manager and vRealize Automation.","vendorProject":null,"product":"VMware Workspace ONE Access, Identity Manager and vRealize Automation.","publishedAt":"2022-04-13","cvss":null,"exploited":null,"epss":{"score":0.03066,"percentile":0.8763,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"no_history","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"no_history","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"rule","firstOn":"2023-01-17","daysToRule":279},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"no_history","firstOn":null,"daysToRule":null}},"title":null,"description":"VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities (CVE-2022-22957 & CVE-2022-22958). A malicious actor with administrative access can trigger deserialization of untrusted data through malicious JDBC URI which may result in remote code execution.","cwes":[],"vendors":[{"vendor":"cloudflare","status":"no_history","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"aws","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"azure","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"google","status":"no_history","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"fastly","status":"no_history","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"f5","status":"rule","basis":"claimed","firstOn":"2023-01-17","firstIsNew":true,"daysToRule":279,"daysAtMost":null,"freePlan":false,"claims":[{"id":"6b5bb1549198f1787d6460f94721d75bc1f39f09cf072bf0ce81806553fdec1d","cve_id":"CVE-2022-22958","vendor":"f5","product":"Attack signatures","rule_id":"200103292","rule_name":"VMware Workspace ONE Access JDBC Remote Code Execution","change":"new","default_action":null,"published_on":"2023-01-17","source_url":"https://docs.cloud.f5.com/docs-v2/platform/changelogs/security-details-changelog","source_title":"F5 Distributed Cloud attack signatures changelog","excerpt":"Added: signature 200103292 \"VMware Workspace ONE Access JDBC Remote Code Execution\" (Command Execution, risk High), systems: Other Web Server. References: CVE-2022-22957, CVE-2022-22958, CVE-2022-22959.","first_seen_at":"2026-11-02T21:00:28.654Z"},{"id":"8a9874a89ab07eb518894ce9f288064dac9a9afa7bd5e0a39f9e4b07c17f6723","cve_id":"CVE-2022-22958","vendor":"f5","product":"Attack signatures","rule_id":"200104819","rule_name":"Java code injection - com.vmware.licensecheck.LicenseChecker (Parameter)","change":"new","default_action":null,"published_on":"2023-01-17","source_url":"https://docs.cloud.f5.com/docs-v2/platform/changelogs/security-details-changelog","source_title":"F5 Distributed Cloud attack signatures changelog","excerpt":"Added: signature 200104819 \"Java code injection - com.vmware.licensecheck.LicenseChecker (Parameter)\" (Server Side Code Injection, risk High), systems: Java Servlets/JSP, Other Web Server. References: CVE-2022-22957, CVE-2022-22958.","first_seen_at":"2026-11-02T21:00:28.819Z"},{"id":"ed9493ee42fa075b68015f33dc35f9d0b499d7b94070fbcfbd0618975a268f31","cve_id":"CVE-2022-22958","vendor":"f5","product":"Attack signatures","rule_id":"200104820","rule_name":"Java code injection - com.vmware.licensecheck.LicenseChecker","change":"new","default_action":null,"published_on":"2023-01-17","source_url":"https://docs.cloud.f5.com/docs-v2/platform/changelogs/security-details-changelog","source_title":"F5 Distributed Cloud attack signatures changelog","excerpt":"Added: signature 200104820 \"Java code injection - com.vmware.licensecheck.LicenseChecker\" (Server Side Code Injection, risk High), systems: Java Servlets/JSP, Other Web Server. References: CVE-2022-22957, CVE-2022-22958.","first_seen_at":"2026-11-02T21:00:28.819Z"},{"id":"37509a84806f97e1a52943f0fa7d3df5c7dc22474a078747ba2066b531f925a3","cve_id":"CVE-2022-22958","vendor":"f5","product":"Attack signatures","rule_id":"200104821","rule_name":"Java code injection - com.mysql.jdbc.interceptors.ServerStatusDiffInterceptor (Parameter)","change":"new","default_action":null,"published_on":"2023-01-17","source_url":"https://docs.cloud.f5.com/docs-v2/platform/changelogs/security-details-changelog","source_title":"F5 Distributed Cloud attack signatures changelog","excerpt":"Added: signature 200104821 \"Java code injection - com.mysql.jdbc.interceptors.ServerStatusDiffInterceptor (Parameter)\" (Server Side Code Injection, risk High), systems: Java Servlets/JSP, Other Web Server. References: CVE-2022-22958, CVE-2022-22957.","first_seen_at":"2026-11-02T21:00:28.819Z"},{"id":"2febd5f950ba69708b81c36456b0e8fcaa0eaed920563a944183c81ed9afd1d6","cve_id":"CVE-2022-22958","vendor":"f5","product":"Attack signatures","rule_id":"200104822","rule_name":"Java code injection - com.mysql.jdbc.interceptors.ServerStatusDiffInterceptor","change":"new","default_action":null,"published_on":"2023-01-17","source_url":"https://docs.cloud.f5.com/docs-v2/platform/changelogs/security-details-changelog","source_title":"F5 Distributed Cloud attack signatures changelog","excerpt":"Added: signature 200104822 \"Java code injection - com.mysql.jdbc.interceptors.ServerStatusDiffInterceptor\" (Server Side Code Injection, risk High), systems: Java Servlets/JSP, Other Web Server. References: CVE-2022-22958, CVE-2022-22957.","first_seen_at":"2026-11-02T21:00:28.819Z"},{"id":"d3ce27c97218ed53afbae095e77319e5f8c1a3b484f6c97837942a3d0a9cdf15","cve_id":"CVE-2022-22958","vendor":"f5","product":"Attack signatures","rule_id":"200103292","rule_name":"VMware Workspace ONE Access JDBC Remote Code Execution","change":"new","default_action":null,"published_on":"2023-02-14","source_url":"https://docs.cloud.f5.com/docs-v2/platform/changelogs/security-details-changelog","source_title":"F5 Distributed Cloud attack signatures changelog","excerpt":"Added: signature 200103292 \"VMware Workspace ONE Access JDBC Remote Code Execution\" (Command Execution, risk High), systems: Other Web Server. References: CVE-2022-22957, CVE-2022-22958, CVE-2022-22959.","first_seen_at":"2026-11-02T21:00:28.654Z"},{"id":"9b9aff9d99b91614dd7adedb54101e7a0a44843159a68c69c766d2e9d8be1df5","cve_id":"CVE-2022-22958","vendor":"f5","product":"Attack signatures","rule_id":"200104819","rule_name":"Java code injection - com.vmware.licensecheck.LicenseChecker (Parameter)","change":"new","default_action":null,"published_on":"2023-02-14","source_url":"https://docs.cloud.f5.com/docs-v2/platform/changelogs/security-details-changelog","source_title":"F5 Distributed Cloud attack signatures changelog","excerpt":"Added: signature 200104819 \"Java code injection - com.vmware.licensecheck.LicenseChecker (Parameter)\" (Server Side Code Injection, risk High), systems: Java Servlets/JSP, Other Web Server. References: CVE-2022-22957, CVE-2022-22958.","first_seen_at":"2026-11-02T21:00:28.654Z"},{"id":"ea34461b09c2f431250cf85c05823132604c159bcedd4a04f96041f5f06069a9","cve_id":"CVE-2022-22958","vendor":"f5","product":"Attack signatures","rule_id":"200104820","rule_name":"Java code injection - com.vmware.licensecheck.LicenseChecker","change":"new","default_action":null,"published_on":"2023-02-14","source_url":"https://docs.cloud.f5.com/docs-v2/platform/changelogs/security-details-changelog","source_title":"F5 Distributed Cloud attack signatures changelog","excerpt":"Added: signature 200104820 \"Java code injection - com.vmware.licensecheck.LicenseChecker\" (Server Side Code Injection, risk High), systems: Java Servlets/JSP, Other Web Server. References: CVE-2022-22957, CVE-2022-22958.","first_seen_at":"2026-11-02T21:00:28.654Z"},{"id":"3669982eaacb632255c3e321108c47cedd6f73c4be7992e22f7fb3a2b9ac5f9c","cve_id":"CVE-2022-22958","vendor":"f5","product":"Attack signatures","rule_id":"200104821","rule_name":"Java code injection - com.mysql.jdbc.interceptors.ServerStatusDiffInterceptor (Parameter)","change":"new","default_action":null,"published_on":"2023-02-14","source_url":"https://docs.cloud.f5.com/docs-v2/platform/changelogs/security-details-changelog","source_title":"F5 Distributed Cloud attack signatures changelog","excerpt":"Added: signature 200104821 \"Java code injection - com.mysql.jdbc.interceptors.ServerStatusDiffInterceptor (Parameter)\" (Server Side Code Injection, risk High), systems: Java Servlets/JSP, Other Web Server. References: CVE-2022-22958, CVE-2022-22957.","first_seen_at":"2026-11-02T21:00:28.654Z"},{"id":"fa8281ec07e6d4e48d3804ffac9fb374d11e927b46febbb87e9853db28b50eed","cve_id":"CVE-2022-22958","vendor":"f5","product":"Attack signatures","rule_id":"200104822","rule_name":"Java code injection - com.mysql.jdbc.interceptors.ServerStatusDiffInterceptor","change":"new","default_action":null,"published_on":"2023-02-14","source_url":"https://docs.cloud.f5.com/docs-v2/platform/changelogs/security-details-changelog","source_title":"F5 Distributed Cloud attack signatures changelog","excerpt":"Added: signature 200104822 \"Java code injection - com.mysql.jdbc.interceptors.ServerStatusDiffInterceptor\" (Server Side Code Injection, risk High), systems: Java Servlets/JSP, Other Web Server. References: CVE-2022-22958, CVE-2022-22957.","first_seen_at":"2026-11-02T21:00:28.654Z"}]},{"vendor":"akamai","status":"no_source","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"crs","status":"no_history","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]}],"updatedAt":"2026-11-02T21:17:16.933Z","cvssVector":null,"ssvc":null,"measured":[],"social":{"total":0,"first_seen":null,"daily":[{"day":"2026-10-21","posts":0},{"day":"2026-10-22","posts":0},{"day":"2026-10-23","posts":0},{"day":"2026-10-24","posts":0},{"day":"2026-10-25","posts":0},{"day":"2026-10-26","posts":0},{"day":"2026-10-27","posts":0},{"day":"2026-10-28","posts":0},{"day":"2026-10-29","posts":0},{"day":"2026-10-30","posts":0},{"day":"2026-10-31","posts":0},{"day":"2026-11-01","posts":0},{"day":"2026-11-02","posts":0},{"day":"2026-11-03","posts":0}],"top_posts":[],"exploit_repositories":[]}}