CVE-2022-31673: VMware vRealize Operations

High severity, CVSS 8.8. EPSS: 1.8% chance of exploitation in the next 30 days.

VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can create and leak hex dumps, leading to information disclosure. Successful exploitation can lead to a remote code execution.

Affected products

• VMware vRealize Operations: from 8.0.0, before 8.6.4 (fixed in 8.6.4)

Published 2022-08-10. Last modified 2026-10-08.