VMware

Records1182All Threatist records

Exploited (KEV)41In CISA KEV

CVSS critical188CVSS 9.0–10.0

CVSS high460CVSS 7.0–8.9

Exploited now

VMware records in CISA KEV

TI-2026-30225 Broadcom VMWare ESX Insufficient Logging Vulnerability HIGH 71KEV 2026-10-28 TI-2026-42442 Broadcom VMware vCenter Path Traversal Vulnerability CRITICAL 100KEV 2026-08-18 TI-2021-05093 Omnissa Workspace ONE Server-Side Request Forgery CRITICAL 92KEV 2026-03-09 TI-2026-18246 Broadcom VMware Aria Operations Command Injection Vulnerability CRITICAL 94KEV 2026-03-03 TI-2024-24610 Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability CRITICAL 100KEV 2026-01-23 TI-2025-27491 Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability CRITICAL 93KEV 2025-10-30

Components

Products in the NVD configurations · select one to filter the records

Workstation 213 records CRITICAL Esxi 140 records CRITICAL Cloud Foundation 135 records CRITICAL Fusion 131 records CRITICAL Player 89 records HIGH Esx 86 records CRITICAL Spring Framework 83 records CRITICAL Vcenter Server 81 records CRITICAL

Records

9 records in Access Connector · all components

TI-2022-13575 CVE-2022-31656 · GHSA-hvqf-whpm-54wr

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an…

MEDIUM 63

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.24675 Published 2022-08-05 No fix listed

TI-2022-13576 CVE-2022-31657 · GHSA-vqqr-hhw5-5mrg

Open redirect in VMware Workspace ONE Access, Identity Manager and vRealize Automation

MEDIUM 45

VMware Workspace ONE Access and Identity Manager contain a URL injection vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01341 Published 2022-08-05 No fix listed CWE-601

TI-2022-13578 CVE-2022-31659 · GHSA-xpqf-h5q4-9r99

SQL injection in VMware Workspace ONE Access, Identity Manager and vRealize Automation

LOW 37

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02999 Published 2022-08-05 No fix listed CWE-89

TI-2022-13579 CVE-2022-31660 · GHSA-gc6x-jwj2-5837

VMware Workspace ONE Access, Identity Manager and vRealize Automation contains a…

LOW 36

VMware Workspace ONE Access, Identity Manager and vRealize Automation contains a privilege escalation vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01145 Published 2022-08-05 No fix listed

TI-2022-13577 CVE-2022-31658 · GHSA-5jrr-qcmv-7pvq

Injection in VMware Workspace ONE Access, Identity Manager and vRealize Automation

LOW 36

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0226 Published 2022-08-05 No fix listed CWE-74

TI-2022-13581 CVE-2022-31662 · GHSA-6xw4-c3mm-xc5r

Path traversal in VMware Workspace ONE Access, Access Connector, Identity Manager, vIDM…

LOW 35

VMware Workspace ONE Access, Identity Manager, Connectors and vRealize Automation contain a path traversal vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01264 Published 2022-08-05 No fix listed CWE-22

TI-2022-13583 CVE-2022-31664 · GHSA-qh6g-q5gx-px23

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege…

LOW 34

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00327 Published 2022-08-05 No fix listed

TI-2022-13580 CVE-2022-31661 · GHSA-9x7x-rxxp-r268

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two…

LOW 34

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two privilege escalation vulnerabilities.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00334 Published 2022-08-05 No fix listed

TI-2022-13582 CVE-2022-31663 · GHSA-2jf2-rvm2-72fv

Cross-site scripting in VMware Workspace ONE Access, Identity Manager and vRealize…

LOW 28

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a reflected cross-site scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00686 Published 2022-08-05 No fix listed CWE-79

Open these records in search →