CVE-2022-22954

VMware Workspace ONE Access suffered a server-side template injection vulnerability enabling remote code execution and actively exploited by ransomware actors.

A server-side template injection flaw in VMware Workspace ONE Access allowed for remote code execution, which has been actively exploited in the wild, including by ransomware groups. DIB organizations using this product face significant exposure and potential compliance failures (NIST 800-171 controls 3.1.1, 3.1.2, 3.1.3) and should immediately patch or mitigate the vulnerability.

Shame score — The vulnerability's exploitation by ransomware demonstrates a critical failure in secure coding practices and a significant risk to DIB data.