VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Dec 14, 2022· Updated Jun 17, 2026

CVE-2022-31702

CVE-2022-31702

Description

vRealize Network Insight (vRNI) contains a command injection vulnerability present in the vRNI REST API. A malicious actor with network access to the vRNI REST API can execute commands without authentication.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • VMware/Vrealize Network Insightllm-fuzzy7 versions
    (expand)+ 6 more
    • (no CPE)
    • cpe:2.3:a:vmware:vrealize_network_insight:6.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vrealize_network_insight:6.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vrealize_network_insight:6.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vrealize_network_insight:6.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vrealize_network_insight:6.6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vrealize_network_insight:6.7.0:*:*:*:*:*:*:*
  • VMware/Vrealize Log Insightcpe-rescue

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.