IM
Product
Identity Manager Connector
On CISA KEVExploited in the wild
13
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 7Medium 3Low 0
Watch
Add Identity Manager Connector to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-4006 In wildKEV | 9.1 | Nov 23 | Multiple VMware Products Command Injection Vulnerability Affected: 3.3.1; 3.3.2; 3.3.1; 3.3.2; 3.3.3 |
| CVE-2022-31657 | 9.8 | Aug 5 | VMware Workspace ONE Access and Identity Manager contain a URL injection vulnerability Affected: 3.3.4; 3.3.5; 3.3.6; 19.03.0.1 |
| CVE-2022-31656 | 9.8 | Aug 5 | VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users Affected: 3.3.4; 3.3.5; 3.3.6; 19.03.0.1 |
| CVE-2022-31661 | 7.8 | Aug 5 | VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two privilege escalation vulnerabilities Affected: 3.3.4; 3.3.5; 3.3.6; 19.03.0.1 |
| CVE-2022-31664 | 7.8 | Aug 5 | VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability Affected: 3.3.4; 3.3.5; 3.3.6; 19.03.0.1 |
| CVE-2022-31660 | 7.8 | Aug 5 | VMware Workspace ONE Access, Identity Manager and vRealize Automation contains a privilege escalation vulnerability Affected: 3.3.4; 3.3.5; 3.3.6; 19.03.0.1 |
| CVE-2022-31662 | 7.5 | Aug 5 | VMware Workspace ONE Access, Identity Manager, Connectors and vRealize Automation contain a path traversal vulnerability Affected: 3.3.4; 3.3.5; 3.3.6; 19.03.0.1 |
| CVE-2022-31658 | 7.2 | Aug 5 | VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability Affected: 3.3.4; 3.3.5; 3.3.6; 19.03.0.1 |
| CVE-2022-31659 | 7.2 | Aug 5 | VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability Affected: 3.3.4; 3.3.5; 3.3.6; 19.03.0.1 |
| CVE-2022-31665 | 7.2 | Aug 5 | VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability Affected: 3.3.4; 3.3.5; 3.3.6; 19.03.0.1 |
| CVE-2023-20884 | 6.1 | May 30 | VMware Workspace ONE Access and VMware Identity Manager contain an insecure redirect vulnerability. An unauthenticated malicious actor may be able to redirect a victim to an… Affected: All versions, or not specified |
| CVE-2022-31663 | 6.1 | Aug 5 | VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a reflected cross-site scripting (XSS) vulnerability Affected: 3.3.4; 3.3.5; 3.3.6; 19.03.0.1 |
| CVE-2022-31701 | 5.3 | Dec 14 | VMware Workspace ONE Access and Identity Manager contain a broken authentication vulnerability Affected: 3.3.6 |
Showing 13