Priority LOW 27
VMware Workspace ONE Access and VMware Identity Manager contain an insecure redirect vulnerability.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00348 · Published 2023-05-30 · No fix listed CWE-601
Priority MEDIUM 42
VMware Workspace ONE Access and Identity Manager contain an authenticated remote code execution vulnerability.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01169 · Published 2022-12-14 · No fix listed
Priority MEDIUM 45
VMware Workspace ONE Access and Identity Manager contain a URL injection vulnerability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01341 · Published 2022-08-05 · No fix listed CWE-601
Priority MEDIUM 63
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.24675 · Published 2022-08-05 · No fix listed
Priority LOW 36
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.0226 · Published 2022-08-05 · No fix listed CWE-74
Priority LOW 34
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two privilege escalation vulnerabilities.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00334 · Published 2022-08-05 · No fix listed
Priority LOW 37
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.02999 · Published 2022-08-05 · No fix listed CWE-89
Priority LOW 28
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a reflected cross-site scripting (XSS) vulnerability.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00686 · Published 2022-08-05 · No fix listed CWE-79
Priority LOW 34
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00327 · Published 2022-08-05 · No fix listed
Priority LOW 36
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.02518 · Published 2022-08-05 · No fix listed CWE-74
Priority LOW 36
VMware Workspace ONE Access, Identity Manager and vRealize Automation contains a privilege escalation vulnerability.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01145 · Published 2022-08-05 · No fix listed
Priority LOW 35
VMware Workspace ONE Access, Identity Manager, Connectors and vRealize Automation contain a path traversal vulnerability.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01264 · Published 2022-08-05 · No fix listed CWE-22
Priority HIGH 75
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.56305 · Published 2022-05-20 · No fix listed
Priority LOW 39
VMware Workspace ONE Access and Identity Manager contain a privilege escalation vulnerability.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.02354 · Published 2022-05-20 · No fix listed
Priority LOW 37
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities (CVE-2022-22957 & CVE-2022-22958).
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.03066 · Published 2022-04-13 · No fix listed CWE-502
Priority MEDIUM 53
VMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE-2022-22956) in the OAuth2 ACS framework.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0782 · Published 2022-04-13 · No fix listed
Priority LOW 26
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an information disclosure vulnerability due to returning excess information.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00846 · Published 2022-04-13 · No fix listed CWE-200
Priority LOW 21
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a cross site request forgery vulnerability.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00505 · Published 2022-04-13 · No fix listed CWE-352
Priority CRITICAL 93KEV
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.35519 · Published 2022-04-13 · No fix listed CWE-732
Priority MEDIUM 52
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities (CVE-2022-22957 & CVE-2022-22958).
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.23307 · Published 2022-04-13 · No fix listed CWE-502
Priority HIGH 73
VMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE-2022-22956) in the OAuth2 ACS framework.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.49533 · Published 2022-04-13 · No fix listed CWE-287
Priority CRITICAL 100KEV
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.99998 · Published 2022-04-11 · No fix listed CWE-94
Priority LOW 36
VMware Workspace ONE Access 21.08, 20.10.0.1, and 20.10 and Identity Manager 3.3.5, 3.3.4, and 3.3.3 contain an SSRF vulnerability.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01609 · Published 2021-12-20 · No fix listed CWE-918
Priority LOW 35
VMware Workspace ONE Access and Identity Manager, unintentionally provide a login interface on port 7443.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00994 · Published 2021-08-31 · No fix listed CWE-307
Priority MEDIUM 44
VMware Workspace ONE Access and Identity Manager, allow the /cfg web app and diagnostic endpoints, on port 8443, to be accessed via port 443 using a custom host header.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01207 · Published 2021-08-31 · No fix listed CWE-287
Load more
THREATIST.IORead the docs