CVE-2022-31708: VMware vRealize Operations

Medium severity, CVSS 4.9. EPSS: 0.8% chance of exploitation in the next 30 days.

vRealize Operations (vROps) contains a broken access control vulnerability. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 4.4.

Affected products

• VMware vRealize Operations: from 8.6.0, before 8.6.4.20823815 (fixed in 8.6.4.20823815); version 8.10.0 only

Published 2022-12-16. Last modified 2026-06-17.