CVE-2023-20884

>= 21.0.8.0 and <= 22.09.1.0

VMware Workspace ONE Access and VMware Identity Manager contain an insecure redirect vulnerability. An unauthenticated malicious

6.1MEDIUM

CVE-2022-22973

all versions

VMware Workspace ONE Access and Identity Manager contain a privilege escalation vulnerability. A malicious actor with local access

7.8HIGH

CVE-2022-22972

all versions

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting loc

9.8CRITICAL

CVE-2022-22961

all versions

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an information disclosure vulnerability due to retur

5.3MEDIUM

CVE-2022-22960

all versions

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper

7.8HIGH

CVE-2022-22959

all versions

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a cross site request forgery vulnerability. A malici

4.3MEDIUM

CVE-2022-22958

all versions

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities (CVE-2022-

7.2HIGH

CVE-2022-22957

all versions

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities (CVE-2022-

7.2HIGH

CVE-2022-22956

all versions

VMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE-2022-22956) in the OAuth2 ACS fram

9.8CRITICAL

CVE-2022-22955

all versions

VMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE-2022-22956) in the OAuth2 ACS fram

9.8CRITICAL

CVE-2022-22954

all versions

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injecti

9.8CRITICAL

CVE-2021-22057

all versions

VMware Workspace ONE Access 21.08, 20.10.0.1, and 20.10 contain an authentication bypass vulnerability. A malicious actor, who has

8.8HIGH

CVE-2021-22056

all versions

VMware Workspace ONE Access 21.08, 20.10.0.1, and 20.10 and Identity Manager 3.3.5, 3.3.4, and 3.3.3 contain an SSRF vulnerability

7.5HIGH

CVE-2021-22003

all versions

VMware Workspace ONE Access and Identity Manager, unintentionally provide a login interface on port 7443. A malicious actor with n

7.5HIGH

CVE-2021-22002

all versions

VMware Workspace ONE Access and Identity Manager, allow the /cfg web app and diagnostic endpoints, on port 8443, to be accessed vi

9.8CRITICAL