Vrealize Suite Lifecycle Manager vulnerabilities | LiveThreat CVE Feed

Product

Vrealize Suite Lifecycle Manager

by Vmware · last CVE May 20, 2022

On CISA KEVExploited in the wildRansomware-linked

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities21 In the news0 Timeline

Severity mix

Critical 4High 11Medium 5Low 1

Severity

All severities21 Critical4 High11 Medium5 Low1

Exploitation

On CISA KEV4 Exploited in the wild4

Watch

Add Vrealize Suite Lifecycle Manager to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2022-22960 In wildKEV	7.8	36%	Apr 13	VMware Multiple Products Privilege Escalation Vulnerability Affected: 8.0 before 9.0
CVE-2021-21975 RansomwareIn wildKEV	7.5	78%	Mar 31	VMware Server Side Request Forgery in vRealize Operations Manager API Affected: 8.0; 8.0.1; 8.1; 8.2
CVE-2022-22973	7.8	2%	May 20	VMware Workspace ONE Access and Identity Manager contain a privilege escalation vulnerability Affected: 8.0; 8.0.1; 8.1; 8.2; 8.2; 8.2; +17 more
CVE-2021-22003	7.5	1%	Aug 31	VMware Workspace ONE Access and Identity Manager, unintentionally provide a login interface on port 7443 Affected: 8.0; 8.0.1; 8.1; 8.2
CVE-2021-22027	7.5	1%	Aug 30	The vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in an end point Affected: 8.0 through 8.2
CVE-2021-22026	7.5	1%	Aug 30	The vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in an end point Affected: 8.0 through 8.2
CVE-2021-22025	7.5	1%	Aug 30	The vRealize Operations Manager API (8.x prior to 8.5) contains a broken access control vulnerability leading to unauthenticated API access Affected: 8.0 through 8.2
CVE-2021-22024	7.5	1%	Aug 30	The vRealize Operations Manager API (8.x prior to 8.5) contains an arbitrary log-file read vulnerability Affected: 8.0 through 8.2
CVE-2022-22958	7.2	3%	Apr 13	VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities (CVE-2022-22957 & CVE-2022-22958) Affected: 8.0 before 9.0
CVE-2022-22957	7.2	23%	Apr 13	VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities (CVE-2022-22957 & CVE-2022-22958) Affected: 8.0 before 9.0
CVE-2021-22023	7.2	1%	Aug 30	The vRealize Operations Manager API (8.x prior to 8.5) has insecure object reference vulnerability Affected: 8.0 through 8.2