Skip to content
Vmware Vrealize Suite Lifecycle Manager vulnerabilities
-
vmware identity manager, vrealize automation, workspace one access +2 more +4 more
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication...
CVE-2022-22972
Public exploit
EPSS 56.3%
9.8 Critical
-
vmware identity manager, workspace one access, cloud foundation +1 more +3 more
VMware Workspace ONE Access and Identity Manager contain a privilege escalation vulnerability. A...
CVE-2022-22973
7.8 High
-
vmware identity manager, vrealize automation, workspace one access +2 more +4 more
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code...
CVE-2022-22958
7.2 High
-
vmware identity manager, vrealize automation, workspace one access +2 more +4 more
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an information...
CVE-2022-22961
5.3 Medium
-
vmware identity manager, vrealize automation, workspace one access +2 more +4 more
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a cross site...
CVE-2022-22959
4.3 Medium
-
vmware identity manager, vrealize automation, workspace one access +3 more +5 more
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege...
CVE-2022-22960
In KEVPublic exploit
EPSS 35.5%
7.8 High
-
vmware identity manager, vrealize automation, workspace one access +2 more +4 more
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code...
CVE-2022-22957
Public exploit
EPSS 23.3%
7.2 High
-
vmware identity manager, workspace one access and identity manager, workspace one access +3 more +5 more
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability...
CVE-2022-22954
In KEVPublic exploit
EPSS 100.0%
9.8 Critical
-
vmware vrealize log insight, cloud foundation, vrealize suite lifecycle manager +2 more
VMware vRealize Log Insight (8.x prior to 8.6) contains a CSV(Comma Separated Value) injection...
CVE-2021-22035
4.3 Medium
-
vmware vrealize operations, cloud foundation, vrealize suite lifecycle manager +2 more
Releases prior to VMware vRealize Operations 8.6 contain a Server Side Request Forgery (SSRF)...
CVE-2021-22033
2.7 Low
-
vmware identity manager, workspace one access, cloud foundation +1 more +3 more
VMware Workspace ONE Access and Identity Manager, unintentionally provide a login interface on...
CVE-2021-22003
7.5 High
-
vmware identity manager, workspace one access, cloud foundation +1 more +3 more
VMware Workspace ONE Access and Identity Manager, allow the /cfg web app and diagnostic endpoints...
CVE-2021-22002
9.8 Critical
-
vmware vrealize operations manager, cloud foundation, vrealize suite lifecycle manager +2 more
The vRealize Operations Manager API (8.x prior to 8.5) contains a broken access control...
CVE-2021-22025
7.5 High
-
vmware vrealize operations manager, cloud foundation, vrealize suite lifecycle manager +2 more
The vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in...
CVE-2021-22027
7.5 High
-
vmware vrealize operations manager, cloud foundation, vrealize suite lifecycle manager +2 more
The vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in...
CVE-2021-22026
7.5 High
-
vmware vrealize operations manager, cloud foundation, vrealize suite lifecycle manager +2 more
The vRealize Operations Manager API (8.x prior to 8.5) contains an arbitrary log-file read...
CVE-2021-22024
7.5 High
-
vmware vrealize operations manager, cloud foundation, vrealize suite lifecycle manager +2 more
The vRealize Operations Manager API (8.x prior to 8.5) has insecure object reference...
CVE-2021-22023
7.2 High
-
vmware vrealize operations manager, cloud foundation, vrealize suite lifecycle manager +2 more
The vRealize Operations Manager API (8.x prior to 8.5) contains an arbitrary file read...
CVE-2021-22022
4.9 Medium
-
vmware vrealize operations manager api, vrealize operations manager, cloud foundation +1 more +3 more
Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may...
CVE-2021-21975
In KEVPublic exploit
EPSS 78.0%
7.5 High
-
vmware vrealize operations manager, cloud foundation, vrealize suite lifecycle manager +2 more
Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8...
CVE-2021-21983
Public exploit
EPSS 68.8%
6.5 Medium
-
vmware identity manager, identity manager connector, one access +3 more +5 more
VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector...
CVE-2020-4006
In KEV
EPSS 17.3%
9.1 Critical