CVE-2022-22966: VMware Vcloud Director

High severity, CVSS 7.2. EPSS: 6.6% chance of exploitation in the next 30 days.

An authenticated, high privileged malicious actor with network access to the VMware Cloud Director tenant or provider may be able to exploit a remote code execution vulnerability to gain access to the server.

Affected products

• VMware Vcloud Director: from 10.1.0, before 10.1.4.1 (fixed in 10.1.4.1); from 10.2.0, before 10.2.2.3 (fixed in 10.2.2.3); from 10.3.0, before 10.3.3 (fixed in 10.3.3)

Published 2022-04-14. Last modified 2026-06-17.