Vulnerabilities

TI-2022-13576 CVE-2022-31657 · GHSA-vqqr-hhw5-5mrg

Open redirect in VMware Workspace ONE Access, Identity Manager and vRealize Automation

MEDIUM 45

VMware Workspace ONE Access and Identity Manager contain a URL injection vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01341 Published 2022-08-05 No fix listed CWE-601

TI-2022-13575 CVE-2022-31656 · GHSA-hvqf-whpm-54wr

MEDIUM 63

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.24675 Published 2022-08-05 No fix listed

TI-2022-13577 CVE-2022-31658 · GHSA-5jrr-qcmv-7pvq

LOW 36

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0226 Published 2022-08-05 No fix listed CWE-74

TI-2022-13580 CVE-2022-31661 · GHSA-9x7x-rxxp-r268

LOW 34

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two privilege escalation vulnerabilities.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00334 Published 2022-08-05 No fix listed

TI-2022-13578 CVE-2022-31659 · GHSA-xpqf-h5q4-9r99

LOW 37

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02999 Published 2022-08-05 No fix listed CWE-89

TI-2022-13582 CVE-2022-31663 · GHSA-2jf2-rvm2-72fv

LOW 28

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a reflected cross-site scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00686 Published 2022-08-05 No fix listed CWE-79

TI-2022-13583 CVE-2022-31664 · GHSA-qh6g-q5gx-px23

LOW 34

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00327 Published 2022-08-05 No fix listed

TI-2022-13579 CVE-2022-31660 · GHSA-gc6x-jwj2-5837

LOW 36

VMware Workspace ONE Access, Identity Manager and vRealize Automation contains a privilege escalation vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01145 Published 2022-08-05 No fix listed

TI-2022-13581 CVE-2022-31662 · GHSA-6xw4-c3mm-xc5r

LOW 35

VMware Workspace ONE Access, Identity Manager, Connectors and vRealize Automation contain a path traversal vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01264 Published 2022-08-05 No fix listed CWE-22