Constellation · CASCA

Constellation explorer

Every signal has a story.Follow the evidence.

Return to triage

Find a CVE by identifier or text

↵ select

Minimum eligible CVSSOrderKEV only

Start with evidence

Current exploration

CVE-2022-22954

Your trail

Where next?

CVE-2022-22954

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious actor with network access can trigger a server-side template injection that may result in remote code execution.

13 retained evidence references · snapshot-bound · open authoritative view

StateSource-scoped evidence

Priority89.5–90.5

Coverage98.8%

Connections7

Choose an action.

Evidence state

identity unresolved
known present
evidence unknown

Snapshot-bound reason tuple

Evidence supportedfactor_a_kev

Eligible evidence is present for this bounded claim.

Revision: evidence-policy-v1.1.0
Cutoff: 2026-08-27T18:09:02.177Z
Resolution: None

Evidence supportedfactor_b_epss

Eligible evidence is present for this bounded claim.

Revision: evidence-policy-v1.1.0
Cutoff: 2026-08-27T18:09:02.177Z
Resolution: None

Evidence supportedfactor_c_cvss

Eligible evidence is present for this bounded claim.

Revision: casca-direct-cvss-eligibility-v1
Cutoff: 2026-08-27T18:09:02.177Z
Resolution: None

Source-reported scopefactor_d_breadth

The source assertion is retained, but its canonical identity is unresolved.

Revision: casca-factor-d-obligations-v1
Cutoff: 2026-08-27T18:09:02.177Z
Resolution: Resolve identity

Connections 7

has cited scope1 retained · stored CVE-2022-22954 → n/a · VMware Workspace ONE Access and Identity Manager

15bcedff-b647-47b5-bb4c-9f775b6c5a0e

has environmental constraint1 retained · stored CVE-2022-22954 → linux · linux_kernel

db658bb4-64b9-412f-bf04-a70c1f27a983

has vulnerable target scope1 retained · stored CVE-2022-22954 → vmware · cloud_foundation

0fa9ff5b-c0c3-4888-96e0-46ae04e1671c

has vulnerable target scope1 retained · stored CVE-2022-22954 → vmware · vrealize_suite_lifecycle_manager

97f27643-f848-40fa-b732-41e1919baad6

has vulnerable target scope4 retained · stored CVE-2022-22954 → vmware · identity_manager

410b90fb-bf53-429c-930f-75954d9dff6c53734baa-4bef-42ee-8368-222d96b1e787601137be-887b-4d9a-bad5-4fa14a708a0bb7519feb-615a-4aec-91ee-cb2a967813e3

has vulnerable target scope1 retained · stored CVE-2022-22954 → vmware · vrealize_automation

679676eb-96ac-4c26-bc1d-19a6a4d2fcb9

has vulnerable target scope4 retained · stored CVE-2022-22954 → vmware · workspace_one_access

1bdc8d43-f141-48a8-8762-aa699210725a3a7da09c-9130-4874-b2ec-3bf859fe1fd06e03bb34-72ff-421b-921a-40ef2a8342b7bdb494d9-9ef7-4d62-92ef-8c24466babbe

CVEProductSignalSelected / traceVisual proximity carries zero evidence weight.