CVE-2022-22960
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege...
CVE-2022-22960 is a high vulnerability (CVSS 7.8) in Vmware Identity Manager, published April 13, 2022. CISA lists it as known to be exploited, since April 15, 2022. EUVD reports exploitation since April 15, 2022. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 35.5%, the 98th percentile. No source names a fixed version.
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts. A malicious actor with local access can escalate privileges to 'root'.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts. A malicious actor with local access can escalate privileges to 'root'.
- Record
CVE-2022-22960- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-732
- Updated
- 2026-11-02
CVE List
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts. A malicious actor with local access can escalate privileges to 'root'.
- Record
CVE-2022-22960- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-732
- Updated
- 2026-11-02
EUVDEUVD-2022-28083
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts. A malicious actor with local access can escalate privileges to 'root'.
- Record
EUVD-2022-28083- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-8r7c-vjv4-wp6x
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege...
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts. A malicious actor with local access can escalate privileges to 'root'.
- Record
GHSA-8r7c-vjv4-wp6x- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-269, CWE-732
- Updated
- 2026-11-02
CISA KEV No score
VMware Multiple Products Privilege Escalation Vulnerability
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts.
- Record
CVE-2022-22960- Weakness
- CWE-250
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Metasploit | VMware Workspace ONE Access CVE-2022-22960 | 2022-04-06 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | exploitation | |
| 2026-11-02 | created | CVE List, EUVD, GitHub Advisories, CISA KEV, Metasploit, NVD |
References
vmware.com/security/advisories/VMSA-2022-0011.html
packetstormsecurity.com/files/171918/Mware-Workspace-ONE-Remote-Code-Execution.html
cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-22960
nvd.nist.gov/vuln/detail/CVE-2022-22960
github.com/advisories/GHSA-8r7c-vjv4-wp6x