CVE-2022-22960VMware Multiple Products Privilege Escalation Vulnerability

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts. A malicious actor with local access can escalate privileges to 'root'.

7.8 HIGHEPSS 35.51%⚡ Known Exploited (CISA KEV)NVD: Published

Last updated: 2025-10-21 23:15 UTC

OverviewCVSS details

7.8HIGHCVSS 3.1

Score source: CISA-ADP
NVD status: Published
Published: Apr 13, 2022
Assigner: vmware

Affected

VMware Workspace ONE Access, Identity Manager and vRealize Automation

Versions: Access 21.08.0.1, 21.08.0.0, 20.10.0.1, 20.10.0.0. Identity Manager 3.3.6, 3.3.5, 3.3.4, 3.3.3. vRealize Automation 7.6.

Exploitation

Public exploit: None listed
CISA KEV: Listed · Apr 15, 2022
KEV due date: May 6, 2022
Ransomware use: Unknown
SSVC: Exploitation active · Automatable no · Impact total

EPSS · FIRST, scored Nov 6

35.51%chance of exploitation in 30 days

Higher than 98.46% of CVEs

CVSS 3.1 · CISA-ADP

7.8High

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack vector: Local
Attack complexity: Low
Privileges required: Low
User interaction: None
Scope: Unchanged
Confidentiality impact: High
Integrity impact: High
Availability impact: High

NVD status: Published

Overview Affected Products References

NVD CVE.org

Overview

Severity

Score	Severity	Version	Vector String
7.8	HIGH	3.1CISA-ADP	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CVE ID: CVE-2022-22960
Status: Published
Assigner (CNA): vmware
Published: Apr 13, 2022
Last modified: 2025-10-21 23:15 UTC
Weaknesses: CWE-250

Sources

NVD (unavailable at last refresh)
CVE.org
CISA KEV
FIRST EPSS

Refreshed hourly from the sources above. Last fetched 2026-11-07 14:13 UTC.