VW
Product
VMware Workspace ONE Access, Identity Manager and vRealize Automation
On CISA KEVExploited in the wild
10
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 7Medium 1Low 0
Watch
Add VMware Workspace ONE Access, Identity Manager and vRealize Automation to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-22960 In wildKEV | 7.8 | Apr 13 | VMware Multiple Products Privilege Escalation Vulnerability Affected: Access 21.08.0.1, 21.08.0.0, 20.10.0.1, 20.10.0.0. Identity Manager 3.3.6, 3.3.5, 3.3.4, 3.3.3. vRealize Automation 7.6. |
| CVE-2022-31657 | 9.8 | Aug 5 | VMware Workspace ONE Access and Identity Manager contain a URL injection vulnerability Affected: Workspace One Access (21.08.0.1 & 21.08.0.0), Identity Manager (vIDM) (3.3.6, 3.3.5 & 3.3.4), and vRealize Automation 7.6 |
| CVE-2022-31656 | 9.8 | Aug 5 | VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users Affected: Workspace One Access (21.08.0.1 & 21.08.0.0), Identity Manager (vIDM) (3.3.6, 3.3.5 & 3.3.4), and vRealize Automation 7.6 |
| CVE-2022-31661 | 7.8 | Aug 5 | VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two privilege escalation vulnerabilities Affected: Workspace One Access (21.08.0.1 & 21.08.0.0), Identity Manager (vIDM) (3.3.6, 3.3.5 & 3.3.4), and vRealize Automation 7.6 |
| CVE-2022-31664 | 7.8 | Aug 5 | VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability Affected: Workspace One Access (21.08.0.1 & 21.08.0.0), Identity Manager (vIDM) (3.3.6, 3.3.5 & 3.3.4), and vRealize Automation 7.6 |
| CVE-2022-31660 | 7.8 | Aug 5 | VMware Workspace ONE Access, Identity Manager and vRealize Automation contains a privilege escalation vulnerability Affected: Workspace One Access (21.08.0.1 & 21.08.0.0), Identity Manager (vIDM) (3.3.6, 3.3.5 & 3.3.4), and vRealize Automation 7.6 |
| CVE-2022-31658 | 7.2 | Aug 5 | VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability Affected: Workspace One Access (21.08.0.1 & 21.08.0.0), Identity Manager (vIDM) (3.3.6, 3.3.5 & 3.3.4), and vRealize Automation 7.6 |
| CVE-2022-31659 | 7.2 | Aug 5 | VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability Affected: Workspace One Access (21.08.0.1 & 21.08.0.0), Identity Manager (vIDM) (3.3.6, 3.3.5 & 3.3.4), and vRealize Automation 7.6 |
| CVE-2022-31665 | 7.2 | Aug 5 | VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability Affected: Workspace One Access (21.08.0.1 & 21.08.0.0), Identity Manager (vIDM) (3.3.6, 3.3.5 & 3.3.4), and vRealize Automation 7.6 |
| CVE-2022-31663 | 6.1 | Aug 5 | VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a reflected cross-site scripting (XSS) vulnerability Affected: Workspace One Access (21.08.0.1 & 21.08.0.0), Identity Manager (vIDM) (3.3.6, 3.3.5 & 3.3.4), and vRealize Automation 7.6 |
Showing 10
