One Access (Vmware) - vulnerabilities (CVEs)
11 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2022-08-05. Vendor: Vmware.
CVEs of One Access
- CVE-2022-31661 - CVSS 7.8 (high), 2022-08-05: VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two privilege escalation vulnerabilities. A malicious actor with local access…
- CVE-2022-31664 - CVSS 7.8 (high), 2022-08-05: VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability. A malicious actor with local access can…
- CVE-2022-31657 - CVSS 9.8 (critical), 2022-08-05: VMware Workspace ONE Access and Identity Manager contain a URL injection vulnerability. A malicious actor with network access may be able to redirect an…
- CVE-2022-31660 - CVSS 7.8 (high), 2022-08-05: VMware Workspace ONE Access, Identity Manager and vRealize Automation contains a privilege escalation vulnerability. A malicious actor with local access can…
- CVE-2022-31663 - CVSS 6.1 (medium), 2022-08-05: VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a reflected cross-site scripting (XSS) vulnerability. Due to improper user input…
- CVE-2022-31656 - CVSS 9.8 (critical), 2022-08-05: VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious…
- CVE-2022-31659 - CVSS 7.2 (high), 2022-08-05: VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability. A malicious actor with administrator and network access can…
- CVE-2022-31662 - CVSS 7.5 (high), 2022-08-05: VMware Workspace ONE Access, Identity Manager, Connectors and vRealize Automation contain a path traversal vulnerability. A malicious actor with network…
- CVE-2022-31665 - CVSS 7.2 (high), 2022-08-05: VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability. A malicious actor with administrator and…
- CVE-2022-31658 - CVSS 7.2 (high), 2022-08-05: VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability. A malicious actor with administrator and…
- CVE-2020-4006 - CVSS 9.1 (critical), 2020-11-23: VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command injection vulnerability.
