CVE

CVE-2022-22956

9.8

CVSS

Description

VMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE-2022-22956) in the OAuth2 ACS framework. A malicious actor may bypass the authentication mechanism and execute any operation due to exposed endpoints in the authentication framework.

Attack Vector

Privileges Req.

User Interaction

vmware workspace one access

Updated Sep 28, 2026View on NVD →

S4E scanner

criticalProduct Based Web Vulnerabilities~10 seconds

CVE-2022-22956 Scanner

CVE-2022-22956 Scanner - Authentication Bypass vulnerability in VMware Workspace ONE Access

Used 2.3k times · 3.3k assets checked · domain, subdomain, ipv4

Scanner page →Run scanner

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →