Critical Vulnerabilities Disclosed in VMware Products

VMware disclosed multiple critical, high, and medium severity vulnerabilities (including CVE-2022-22954 through CVE-2022-22961) affecting Workspace ONE Access, VMware Identity Manager (vIDM), vRealize Automation, Cloud Foundation, and vRealize Suite Lifecycle Manager; successful exploitation could enable remote code execution, authentication bypass, JDBC injection, CSRF, local privilege escalation, or information disclosure. VMware recommends applying vendor-supplied patches (KB88099) and, if immediate patching is not possible, implementing available workarounds (KB88098) for most issues.