CVE-2022-31674: VMware vRealize Operations

Medium severity, CVSS 4.3. EPSS: 0.6% chance of exploitation in the next 30 days.

VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can access log files that lead to information disclosure.

Affected products

• VMware vRealize Operations: from 8.0.0, before 8.6.4 (fixed in 8.6.4)

Published 2022-08-10. Last modified 2026-06-17.