Login Request a demo
WO
IAM
Workspace ONE Access
by VMware · last CVE May 30, 2023
On CISA KEVExploited in the wildRansomware-linked
30
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities30In the news0Timeline
Severity mix
Critical 8High 16Medium 6Low 0
Severity
All severities30Critical8High16Medium6Low0
Exploitation
On CISA KEV3Exploited in the wild3
Watch

Add Workspace ONE Access to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-22954
RansomwareIn wildKEV
9.8
100%
Apr 11
VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability
Affected: 3.3.3; 3.3.4; 3.3.5; 3.3.6
CVE-2020-4006
In wildKEV
9.1
17%
Nov 23
Multiple VMware Products Command Injection Vulnerability
Affected: 3.3.1; 3.3.2; 3.3.3
CVE-2022-22960
In wildKEV
7.8
36%
Apr 13
VMware Multiple Products Privilege Escalation Vulnerability
Affected: 20.10.0.0; 20.10.0.1; 21.08.0.0; 21.08.0.1
CVE-2022-31657
9.8
1%
Aug 5
VMware Workspace ONE Access and Identity Manager contain a URL injection vulnerability
Affected: 3.3.4; 3.3.5; 3.3.6
CVE-2022-31656
9.8
25%
Aug 5
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users
Affected: 3.3.4; 3.3.5; 3.3.6
CVE-2022-22972
9.8
56%
May 20
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users
Affected: 20.10.0.0; 20.10.0.1; 21.08.0.0; 21.08.0.1
CVE-2022-22956
9.8
50%
Apr 13
VMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE-2022-22956) in the OAuth2 ACS framework
Affected: 3.3.3; 3.3.4; 3.3.5; 3.3.6
CVE-2022-22955
9.8
8%
Apr 13
VMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE-2022-22956) in the OAuth2 ACS framework
Affected: 3.3.3; 3.3.4; 3.3.5; 3.3.6
CVE-2021-22002
9.8
1%
Aug 31
VMware Workspace ONE Access and Identity Manager, allow the /cfg web app and diagnostic endpoints, on port 8443, to be accessed via port 443 using a custom host header
Affected: 3.3.2; 3.3.3; 3.3.4; 3.3.5
CVE-2021-22057
8.8
1%
Dec 20
VMware Workspace ONE Access 21.08, 20.10.0.1, and 20.10 contain an authentication bypass vulnerability
Affected: 20.10; 20.10.0.1; 21.08; 21.08.0.1
CVE-2022-31661
7.8
0%
Aug 5
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two privilege escalation vulnerabilities
Affected: 3.3.4; 3.3.5; 3.3.6
CVE-2022-31664
7.8
0%
Aug 5
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability
Affected: 3.3.4; 3.3.5; 3.3.6
CVE-2022-31660
7.8
1%
Aug 5
VMware Workspace ONE Access, Identity Manager and vRealize Automation contains a privilege escalation vulnerability
Affected: 3.3.4; 3.3.5; 3.3.6
CVE-2022-22973
7.8
2%
May 20
VMware Workspace ONE Access and Identity Manager contain a privilege escalation vulnerability
Affected: 3.3.3; 3.3.4; 3.3.5; 3.3.6
CVE-2016-5335
7.8
0%
Aug 31
VMware Identity Manager 2.x before 2.7 and vRealize Automation 7.0.x before 7.1 allow local users to obtain root access via unspecified vectors
Affected: 2.0 before 2.7
CVE-2022-31662
7.5
1%
Aug 5
VMware Workspace ONE Access, Identity Manager, Connectors and vRealize Automation contain a path traversal vulnerability
Affected: 3.3.4; 3.3.5; 3.3.6
CVE-2021-22056
7.5
2%
Dec 20
VMware Workspace ONE Access 21.08, 20.10.0.1, and 20.10 and Identity Manager 3.3.5, 3.3.4, and 3.3.3 contain an SSRF vulnerability
Affected: 3.3.3; 3.3.4; 3.3.5
CVE-2021-22003
7.5
1%
Aug 31
VMware Workspace ONE Access and Identity Manager, unintentionally provide a login interface on port 7443
Affected: 3.3.2; 3.3.3; 3.3.4; 3.3.5
CVE-2022-31700
7.2
1%
Dec 14
VMware Workspace ONE Access and Identity Manager contain an authenticated remote code execution vulnerability
Affected: 3.3.6
CVE-2022-31658
7.2
2%
Aug 5
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability
Affected: 3.3.4; 3.3.5; 3.3.6
CVE-2022-31659
7.2
3%
Aug 5
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability
Affected: 3.3.4; 3.3.5; 3.3.6
CVE-2022-31665
7.2
3%
Aug 5
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability
Affected: 3.3.4; 3.3.5; 3.3.6
CVE-2022-22958
7.2
3%
Apr 13
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities (CVE-2022-22957 & CVE-2022-22958)
Affected: 20.10.0.0; 20.10.0.1; 21.08.0.0; 21.08.0.1
CVE-2022-22957
7.2
23%
Apr 13
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities (CVE-2022-22957 & CVE-2022-22958)
Affected: 3.3.3; 3.3.4; 3.3.5; 3.3.6
CVE-2023-20884
6.1
0%
May 30
VMware Workspace ONE Access and VMware Identity Manager contain an insecure redirect vulnerability. An unauthenticated malicious actor may be able to redirect a victim to an…
Affected: 21.0.8.0 through 22.09.1.0
CVE-2022-31663
6.1
1%
Aug 5
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a reflected cross-site scripting (XSS) vulnerability
Affected: 3.3.4; 3.3.5; 3.3.6
CVE-2022-22961
5.3
1%
Apr 13
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an information disclosure vulnerability due to returning excess information
Affected: 3.3.3; 3.3.4; 3.3.5; 3.3.6
CVE-2018-6976
5.3
1%
Sep 11
The VMware Content Locker for iOS prior to 4.14 contains a data protection vulnerability in the SQLite database
Affected: before 4.14
CVE-2016-5334
5.3
2%
Dec 29
VMware Identity Manager 2.x before 2.7.1 and vRealize Automation 7.x before 7.2.0 allow remote attackers to read /SAAS/WEB-INF and /SAAS/META-INF files via unspecified vectors
Affected: 2.0 before 2.7.1
CVE-2022-22959
4.3
1%
Apr 13
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a cross site request forgery vulnerability
Affected: 20.10.0.0; 20.10.0.1; 21.08.0.0; 21.08.0.1
Showing 30