CVE-2022-31701: VMware Access

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

VMware Workspace ONE Access and Identity Manager contain a broken authentication vulnerability. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 5.3.

Affected products

• VMware Access: version 21.08.0.0 only; version 21.08.0.1 only; version 22.09.0.0 only
• VMware Cloud Foundation: any version
• VMware Identity Manager Connector: version 3.3.6 only

Published 2022-12-14. Last modified 2026-06-17.