Vmware Vrealize Automation vulnerabilities

• vmware vrealize orchestrator, vrealize automation +1 more VMware vRealize Orchestrator contains an XML External Entity (XXE) vulnerability. A malicious... CVE-2023-20855 8.8 HighFebruary 21, 2023
• vmware identity manager, vrealize automation, workspace one access +2 more +4 more VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication... CVE-2022-22972 Public exploit EPSS 56.3% 9.8 CriticalMay 20, 2022
• vmware identity manager, vrealize automation, workspace one access +2 more +4 more VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code... CVE-2022-22958 7.2 HighApril 13, 2022
• vmware workspace one access, identity manager, vrealize automation +2 more VMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE... CVE-2022-22955 9.8 CriticalApril 13, 2022
• vmware identity manager, vrealize automation, workspace one access +2 more +4 more VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an information... CVE-2022-22961 5.3 MediumApril 13, 2022
• vmware identity manager, vrealize automation, workspace one access +2 more +4 more VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a cross site... CVE-2022-22959 4.3 MediumApril 13, 2022
• vmware identity manager, vrealize automation, workspace one access +3 more +5 more VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege... CVE-2022-22960 In KEVPublic exploit EPSS 35.5% 7.8 HighApril 13, 2022
• vmware identity manager, vrealize automation, workspace one access +2 more +4 more VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code... CVE-2022-22957 Public exploit EPSS 23.3% 7.2 HighApril 13, 2022
• vmware workspace one access, identity manager, vrealize automation +2 more VMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE... CVE-2022-22956 Public exploit EPSS 49.5% 9.8 CriticalApril 13, 2022
• vmware identity manager, workspace one access and identity manager, workspace one access +3 more +5 more VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability... CVE-2022-22954 In KEVPublic exploit EPSS 100.0% 9.8 CriticalApril 11, 2022
• vmware identity manager, workspace one access, vrealize automation +2 more VMware Workspace ONE Access 21.08, 20.10.0.1, and 20.10 and Identity Manager 3.3.5, 3.3.4, and 3... CVE-2021-22056 7.5 HighDecember 20, 2021
• vmware vrealize orchestrator, vrealize automation +1 more VMware vRealize Orchestrator ((8.x prior to 8.6) contains an open redirect vulnerability due to... CVE-2021-22036 6.5 MediumOctober 13, 2021
• vmware vrealize automation VMware vRealize Automation (vRA) prior to 7.4.0 contains a vulnerability in the handling of... CVE-2018-6959 9.8 CriticalApril 13, 2018
• vmware vrealize automation VMware vRealize Automation (vRA) prior to 7.3.1 contains a vulnerability that may allow for a DOM... CVE-2018-6958 6.1 MediumApril 13, 2018
• vmware vrealize automation, vsphere integrated containers +1 more VMware Realize Automation (7.3 and 7.2) and vSphere Integrated Containers (1.x before 1.3)... CVE-2017-4947 9.8 CriticalJanuary 29, 2018
• vmware vrealize automation The Single Sign-On feature in VMware vCenter Server 5.5 before U3e and 6.0 before U2a and... CVE-2016-7460 9.1 CriticalDecember 29, 2016
• vmware identity manager, vrealize automation +1 more VMware Identity Manager 2.x before 2.7.1 and vRealize Automation 7.x before 7.2.0 allow remote... CVE-2016-5334 5.3 MediumDecember 29, 2016
• vmware vrealize automation VMware vRealize Automation 7.0.x before 7.1 allows remote attackers to execute arbitrary code via... CVE-2016-5336 9.8 CriticalAugust 31, 2016
• vmware identity manager, vrealize automation +1 more VMware Identity Manager 2.x before 2.7 and vRealize Automation 7.0.x before 7.1 allow local users... CVE-2016-5335 7.8 HighAugust 31, 2016
• vmware vrealize automation Cross-site scripting (XSS) vulnerability in VMware vRealize Automation 6.x before 6.2.4 on Linux... CVE-2015-2344 5.4 MediumMarch 16, 2016