PULSEUnderground Intel

LIVE63signals / 24h

FEED

ransomaurora reclama a Adams Warehouse & Delivery, Inc. · US · Transportationransomthegentlemen reclama a Suhai Segurana Pessoal · BR · Professional Servicesransomthegentlemen reclama a SBI Audiovisual Medinbox · ES · Healthcareransomthegentlemen reclama a Saga University · JP · Educationransomthegentlemen reclama a Netcore Unbxd · IN · Technologyransomthegentlemen reclama a REGiO Nord · DE · Otherransomthegentlemen reclama a Museum Siam · TH · Hospitalityransomthegentlemen reclama a Skin Center · US · Healthcareransomthegentlemen reclama a Thai Ha PCL KASET · TH · Agriculture and Food Productionransomthegentlemen reclama a Inovar Packaging Group · AU · Manufacturingransomthegentlemen reclama a Engineers Ireland · IE · Professional Servicesransomthegentlemen reclama a North Bridge Venture Partners · US · Financial Servicesransomthegentlemen reclama a SONGWOOI · KR · Not Foundransomthegentlemen reclama a Petroleum Telcom Communications · PK · Energy & Utilitiesransomaurora reclama a Adams Warehouse & Delivery, Inc. · US · Transportationransomthegentlemen reclama a Suhai Segurana Pessoal · BR · Professional Servicesransomthegentlemen reclama a SBI Audiovisual Medinbox · ES · Healthcareransomthegentlemen reclama a Saga University · JP · Educationransomthegentlemen reclama a Netcore Unbxd · IN · Technologyransomthegentlemen reclama a REGiO Nord · DE · Otherransomthegentlemen reclama a Museum Siam · TH · Hospitalityransomthegentlemen reclama a Skin Center · US · Healthcareransomthegentlemen reclama a Thai Ha PCL KASET · TH · Agriculture and Food Productionransomthegentlemen reclama a Inovar Packaging Group · AU · Manufacturingransomthegentlemen reclama a Engineers Ireland · IE · Professional Servicesransomthegentlemen reclama a North Bridge Venture Partners · US · Financial Servicesransomthegentlemen reclama a SONGWOOI · KR · Not Foundransomthegentlemen reclama a Petroleum Telcom Communications · PK · Energy & Utilities

CVE Watch—

CVE-2022-22960

VMware Multiple Products Privilege Escalation Vulnerability

CVSS

—

No CVSS

EPSS

35.5%

p98

KEV

YES

Apr 15, 2022

Exploit Today

80

0-100

Published: — · Last modified: —

EPSS · 30d

35.5%EPSS · 30 days35.8%

2026-09-172026-10-15

KEV catalog record

Product

VMware / Multiple Products

Vulnerability

VMware Multiple Products Privilege Escalation Vulnerability

Added to KEV

Apr 15, 2022

Remediate by

May 6, 2022

Known ransomware use

No

Summary description

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2022-22960

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2020-4006—

KEV—79Multiple VMware Products Command Injection Vulnerability—CVE-2020-3950—

KEV—78VMware Multiple Products Privilege Escalation Vulnerability—