VMware vRealize Operations contains an authentication bypass vulnerability. An unauthenticated malicious actor with network access may be able to create a user with administrative privileges.
https://www.vmware.com/security/advisories/VMSA-2022-0022.html