high7.5
CVE-2022-31710
vRealize Log Insight contains a deserialization vulnerability.
Impact
vRealize Log Insight contains a deserialization vulnerability. An unauthenticated malicious actor can remotely trigger the deserialization of untrusted data which could result in a denial of service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Vrealize Log Insight | from 3.0 through 4.8 from 8.0.0 before 8.10.2 |