{"metadata": {"vulnerability": "CVE-2022-22956", "count": 56, "kinds": {"milestone": 5, "sighting": 29, "kev": 11, "other": 11}}, "data": [{"timestamp": "2022-01-10T00:00:00Z", "date_only": false, "value": "2022-01-10T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-22956", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-04-07T00:00:00Z", "date_only": false, "value": "2022-04-07T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-318", "record": "CERTFR-2022-AVI-318", "field": "last_revision_date"}, {"timestamp": "2022-04-07T00:00:00Z", "date_only": false, "value": "2022-04-07T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-318", "record": "CERTFR-2022-AVI-318", "field": "initial_release_date"}, {"timestamp": "2022-04-07T00:00:00Z", "date_only": false, "value": "2022-04-07T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-318", "record": "CERTFR-2022-AVI-318", "field": "revisions.0.revision_date"}, {"timestamp": "2022-04-07T04:00:00Z", "date_only": false, "value": "2022-04-07T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=775", "record": "CVE-2022-22956", "field": "creation_timestamp", "uuid": "67596e6c-e3fd-408c-a50c-79fd6f91710a", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=775"}, {"timestamp": "2022-04-13T00:00:00Z", "date_only": false, "value": "2022-04-13T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-22956", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-04-13T18:15:00Z", "date_only": false, "value": "2022-04-13T18:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-54HW-PP59-J3RC", "record": "GHSA-54HW-PP59-J3RC", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-04-13T18:15:00Z", "date_only": false, "value": "2022-04-13T18:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-22956", "record": "GSD-2022-22956", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-04-13T18:15:12.970Z", "date_only": false, "value": "2022-04-13T18:15:12.970", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-22956", "record": "FKIE_CVE-2022-22956", "field": "published"}, {"timestamp": "2022-04-14T00:00:16Z", "date_only": false, "value": "2022-04-14T00:00:16Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-54HW-PP59-J3RC", "record": "GHSA-54HW-PP59-J3RC", "field": "published"}, {"timestamp": "2022-04-22T00:01:06Z", "date_only": false, "value": "2022-04-22T00:01:06Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-54HW-PP59-J3RC", "record": "GHSA-54HW-PP59-J3RC", "field": "modified"}, {"timestamp": "2022-05-01T21:40:40Z", "date_only": false, "value": "2022-05-01T21:40:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2076", "record": "CVE-2022-22956", "field": "creation_timestamp", "uuid": "5b5c58a4-85f3-4377-a093-6b46ec7ba898", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1a CVE-2022-22954, CVE-2022-22955,CVE-2022-22956, CVE-2022-22957, CVE-2022-22958, CVE-2022-22959, CVE-2022-22960, CVE-2022-22961 all in one!\nURL\uff1ahttps://github.com/kaanymz/2022-04-06-critical-vmware-fix\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2076"}, {"timestamp": "2023-04-18T15:17:44Z", "date_only": false, "value": "2023-04-18T15:17:44.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/vmware_workspace_one_access_vmsa_2022_0011_chain.rb", "record": "CVE-2022-22956", "field": "creation_timestamp", "uuid": "5d6f0267-55d3-448c-86e8-63cf7626cd61", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/vmware_workspace_one_access_vmsa_2022_0011_chain.rb"}, {"timestamp": "2023-04-18T19:06:17.459Z", "date_only": false, "value": "2023-04-18T19:06:17.459Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / vmware", "record": "CVE-2022-22956", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-04-19T00:15:00Z", "date_only": false, "value": "2023-04-19T00:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-22956", "record": "GSD-2022-22956", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-04-21T02:07:48Z", "date_only": false, "value": "2023-04-21T02:07:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8149", "record": "CVE-2022-22956", "field": "creation_timestamp", "uuid": "c20cefe4-afa6-4dfa-b881-ff369ccaf17d", "content": "#exploit\n1. CVE-2022-22956, CVE-2022-22957:\nVMware Workspace ONE RCE\nhttps://packetstormsecurity.com/files/171918\n\n2. CVE-2023-25136:\nOpenSSH Pre-Auth Double Free\nhttps://github.com/adhikara13/CVE-2023-25136\n\n3. CVE-2023-21931:\nWebLogic After-Deserialization\nhttps://github.com/gobysec/Weblogic/blob/main/Research%20on%20WebLogic%20After-Deserialization.md", "url": "https://t.me/CyberSecurityTechnologies/8149"}, {"timestamp": "2023-05-20T00:26:19Z", "date_only": false, "value": "2023-05-20T00:26:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/LearnExploit/4952", "record": "CVE-2022-22956", "field": "creation_timestamp", "uuid": "6d640064-582d-4a4f-94a7-05c8e30f7e1d", "content": "CVE-2022-22956 - CVE-2022-22957 ( VMware Workspace ONE RCE )\n\nLink\n\n#Exploit #CVE #RCE \n\u2014\u2014\u2014\u2014\u2014\u2014\u200c\n0Day.Today\n@LearnExploit\n@Tech_Army", "url": "https://t.me/LearnExploit/4952"}, {"timestamp": "2023-12-13T01:19:30.050Z", "date_only": false, "value": "2023-12-13T01:19:30.050393Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-22956", "record": "GSD-2022-22956", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T03:28:42.857Z", "date_only": false, "value": "2024-08-03T03:28:42.857Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-22956", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2022-22956", "field": "creation_timestamp", "uuid": "032ced4d-375f-4fbe-91f1-e9fe14a2e199"}, {"timestamp": "2025-02-13T16:28:57.648Z", "date_only": false, "value": "2025-02-13T16:28:57.648Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-22956", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-02-23T04:10:43Z", "date_only": false, "value": "2025-02-23T04:10:43.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2022-22956", "field": "creation_timestamp", "uuid": "4988d893-b300-4766-9b1e-9e07b3d13728"}, {"timestamp": "2025-09-04T21:02:22.780Z", "date_only": false, "value": "2025-09-04T21:02:22.780482Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ly226qoxrx2w", "record": "CVE-2022-22956", "field": "creation_timestamp", "uuid": "f1199e52-f1aa-425a-b141-1eaeae331986", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ly226qoxrx2w"}, {"timestamp": "2025-10-14T12:06:27Z", "date_only": false, "value": "2025-10-14T12:06:27.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-22956.yaml", "record": "CVE-2022-22956", "field": "creation_timestamp", "uuid": "d181adc5-7a60-49ef-b7f0-e1625d355068", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-22956.yaml"}, {"timestamp": "2025-10-20T04:01:23Z", "date_only": false, "value": "2025-10-20T04:01:23.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/nguyentin1136-ops/f5bea0e7ad800547c3e9b5e241e2d65c", "record": "CVE-2022-22956", "field": "creation_timestamp", "uuid": "ce46356a-5960-4165-8373-cc78a7ac6cd3", "url": "https://gist.github.com/nguyentin1136-ops/f5bea0e7ad800547c3e9b5e241e2d65c"}, {"timestamp": "2025-10-20T05:01:51Z", "date_only": false, "value": "2025-10-20T05:01:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/nguyentin1136-ops/937b4359948bbce2e6e7cefbf97e8766", "record": "CVE-2022-22956", "field": "creation_timestamp", "uuid": "827525d1-9661-4afd-8bbd-0d8f2ce2432b", "url": "https://gist.github.com/nguyentin1136-ops/937b4359948bbce2e6e7cefbf97e8766"}, {"timestamp": "2025-10-23T21:13:00Z", "date_only": false, "value": "2025-10-23T21:13:00.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2022-22956", "field": "creation_timestamp", "uuid": "0805b4dd-031f-41e1-b983-b99e416014cb"}, {"timestamp": "2026-01-25T17:58:02Z", "date_only": false, "value": "2026-01-25T17:58:02+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2022-22956", "field": "timestamps.asserted_at", "uuid": "4e79aba6-0acf-486d-8df6-1914f671179c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-01-25T17:58:02Z", "date_only": false, "value": "2026-01-25T17:58:02+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2022-22956", "field": "timestamps.first_seen_at", "uuid": "4e79aba6-0acf-486d-8df6-1914f671179c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-04T00:00:00Z", "date_only": false, "value": "2026-02-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-04)", "record": "CVE-2022-22956", "field": "creation_timestamp", "uuid": "23a6a18e-03e2-4c0f-bc55-010fb559a30b"}, {"timestamp": "2026-02-05T00:00:00Z", "date_only": false, "value": "2026-02-05T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2022-22956", "field": "timestamps.asserted_at", "uuid": "34bc4d37-06f8-4236-90bb-381da04dfa16", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-05T00:00:00Z", "date_only": false, "value": "2026-02-05T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2022-22956", "field": "evidence.0.details.added_date", "uuid": "34bc4d37-06f8-4236-90bb-381da04dfa16", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-05T00:00:00Z", "date_only": false, "value": "2026-02-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-05)", "record": "CVE-2022-22956", "field": "creation_timestamp", "uuid": "15b83230-7111-4c10-9efc-3c8ac81cb384"}, {"timestamp": "2026-02-05T00:00:00Z", "date_only": false, "value": "2026-02-05T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2022-22956", "field": "timestamps.first_seen_at", "uuid": "34bc4d37-06f8-4236-90bb-381da04dfa16", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-05T00:00:00Z", "date_only": false, "value": "2026-02-05T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2022-22956", "field": "status.status_updated_at", "uuid": "34bc4d37-06f8-4236-90bb-381da04dfa16", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-09T00:00:00Z", "date_only": false, "value": "2026-02-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-09)", "record": "CVE-2022-22956", "field": "creation_timestamp", "uuid": "1fb7ea98-9447-45b0-a193-c96e8cafac41"}, {"timestamp": "2026-02-28T00:00:00Z", "date_only": false, "value": "2026-02-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-28)", "record": "CVE-2022-22956", "field": "creation_timestamp", "uuid": "1806cec5-33f2-4674-bde4-07e2a26b14e5"}, {"timestamp": "2026-04-09T00:00:00Z", "date_only": false, "value": "2026-04-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-09)", "record": "CVE-2022-22956", "field": "creation_timestamp", "uuid": "5877c114-137b-4998-94ef-e7d07304197a"}, {"timestamp": "2026-05-26T00:00:00Z", "date_only": false, "value": "2026-05-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-26)", "record": "CVE-2022-22956", "field": "creation_timestamp", "uuid": "2d4c7a9f-643f-4cc6-b88c-43d1f6f33c84"}, {"timestamp": "2026-06-04T00:00:00Z", "date_only": false, "value": "2026-06-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-04)", "record": "CVE-2022-22956", "field": "creation_timestamp", "uuid": "8eb58432-0040-4800-868f-e0e79e973403"}, {"timestamp": "2026-06-13T00:00:00Z", "date_only": false, "value": "2026-06-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-13)", "record": "CVE-2022-22956", "field": "creation_timestamp", "uuid": "fe81734d-c45f-4b9c-9525-5b625b3eabf1"}, {"timestamp": "2026-06-17T04:29:14.537Z", "date_only": false, "value": "2026-06-17T04:29:14.537", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-22956", "record": "FKIE_CVE-2022-22956", "field": "lastModified"}, {"timestamp": "2026-06-19T12:41:46Z", "date_only": false, "value": "2026-06-19T12:41:46+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2022-22956", "field": "timestamps.recorded_at", "uuid": "34bc4d37-06f8-4236-90bb-381da04dfa16", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-19T12:42:36.348Z", "date_only": false, "value": "2026-06-19T12:42:36.348958Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/34bc4d37-06f8-4236-90bb-381da04dfa16", "record": "CVE-2022-22956", "field": "creation_timestamp", "uuid": "d5da2ce5-504d-451f-9c28-50932517014c", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/34bc4d37-06f8-4236-90bb-381da04dfa16"}, {"timestamp": "2026-06-19T12:45:41.370Z", "date_only": false, "value": "2026-06-19T12:45:41.370591Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9fd0e454-ee8f-459b-94b6-8b5ced5aa4e3", "record": "CVE-2022-22956", "field": "creation_timestamp", "uuid": "6f8f9985-58f8-4e01-91cb-79601f64d5ba", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9fd0e454-ee8f-459b-94b6-8b5ced5aa4e3"}, {"timestamp": "2026-06-23T00:00:00Z", "date_only": false, "value": "2026-06-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-23)", "record": "CVE-2022-22956", "field": "creation_timestamp", "uuid": "f1c3a09a-5ce6-417b-be48-721e26f867ac"}, {"timestamp": "2026-06-23T14:03:09.763Z", "date_only": false, "value": "2026-06-23T14:03:09.763691Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/218d3779-2e37-4892-a3fc-ff685cc4f609", "record": "CVE-2022-22956", "field": "creation_timestamp", "uuid": "dd516cf2-f3d8-4b41-bb04-decad2a086b3", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/218d3779-2e37-4892-a3fc-ff685cc4f609"}, {"timestamp": "2026-06-30T09:22:48.193Z", "date_only": false, "value": "2026-06-30T09:22:48.193947Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fc862f17-7e97-48f3-8d18-16155e5c8f67", "record": "CVE-2022-22956", "field": "creation_timestamp", "uuid": "f69c4e25-a582-41f7-b9df-2c5f22140d69", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fc862f17-7e97-48f3-8d18-16155e5c8f67"}, {"timestamp": "2026-07-01T05:54:37.377Z", "date_only": false, "value": "2026-07-01T05:54:37.377011Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/4e79aba6-0acf-486d-8df6-1914f671179c", "record": "CVE-2022-22956", "field": "creation_timestamp", "uuid": "54832272-bab7-43d2-9af1-d61e1464e104", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/4e79aba6-0acf-486d-8df6-1914f671179c"}, {"timestamp": "2026-09-01T17:00:20.965Z", "date_only": false, "value": "2026-09-01T17:00:20.965868Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/6785", "record": "CVE-2022-22956", "field": "creation_timestamp", "uuid": "75d2fd2a-ee15-4fe7-a157-3ef957130903", "url": "https://t.me/cissp/6785"}, {"timestamp": "2026-09-01T20:01:47.389Z", "date_only": false, "value": "2026-09-01T20:01:47.389678Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/49022", "record": "CVE-2022-22956", "field": "creation_timestamp", "uuid": "b241dd3d-8ea0-416d-9a9b-4f92ea1682d4", "url": "https://t.me/hacking_Attack/49022"}, {"timestamp": "2026-09-10T01:00:04.334Z", "date_only": false, "value": "2026-09-10T01:00:04.334422Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/6785", "record": "CVE-2022-22956", "field": "creation_timestamp", "uuid": "a4fce010-9899-4732-94ce-dc732f39fa0d", "url": "https://t.me/cissp/6785"}, {"timestamp": "2026-10-30T00:00:00Z", "date_only": false, "value": "2026-10-30T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2022-22956", "field": "timestamps.last_seen_at", "uuid": "4e79aba6-0acf-486d-8df6-1914f671179c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-30T00:00:00Z", "date_only": true, "value": "2026-10-30", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2022-22956", "field": "evidence.0.details.observation_date", "uuid": "4e79aba6-0acf-486d-8df6-1914f671179c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-30T00:00:00Z", "date_only": false, "value": "2026-10-30T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2022-22956", "field": "status.status_updated_at", "uuid": "4e79aba6-0acf-486d-8df6-1914f671179c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-01T01:00:01Z", "date_only": false, "value": "2026-11-01T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2022-22956", "field": "timestamps.recorded_at", "uuid": "4e79aba6-0acf-486d-8df6-1914f671179c", "status": {"status_reason": "confirmed", "exploited": true}}]}