CVE-2022-31680

9.1 criticalEPSS 31%

Critical (9.1) in vmware vcenter server. EPSS 31% chance of exploitation in the next 30 days.

The vCenter Server contains an unsafe deserialisation vulnerability in the PSC (Platform services controller). A malicious actor with admin access on vCenter server may exploit this issue to execute arbitrary code on the underlying operating system that hosts the vCenter Server.

Severity

CVSS 3.1

9.1 critical

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

EPSS: 31% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWE: CWE-502
Published: 2022-10-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

vmware:vcenter_server

References

https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1587
https://www.vmware.com/security/advisories/VMSA-2022-0025.html
https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1587
https://www.vmware.com/security/advisories/VMSA-2022-0025.html

Check your stack JSON