Vrealize Suite Lifecycle Manager (Vmware) - vulnerabilities (CVEs)

21 CVEs, 0 in the last 30 days, 24 known versions, newest CVE from 2022-05-20. Vendor: Vmware.

CVEs of Vrealize Suite Lifecycle Manager

CVE-2022-22973 - CVSS 7.8 (high), 2022-05-20: VMware Workspace ONE Access and Identity Manager contain a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to…
CVE-2022-22972 - CVSS 9.8 (critical), 2022-05-20: VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious…
CVE-2022-22958 - CVSS 7.2 (high), 2022-04-13: VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities (CVE-2022-22957 & CVE-2022-22958). A…
CVE-2022-22961 - CVSS 5.3 (medium), 2022-04-13: VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an information disclosure vulnerability due to returning excess information. A…
CVE-2022-22957 - CVSS 7.2 (high), 2022-04-13: VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities (CVE-2022-22957 & CVE-2022-22958). A…
CVE-2022-22960 - CVSS 7.8 (high), 2022-04-13: VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support…
CVE-2022-22959 - CVSS 4.3 (medium), 2022-04-13: VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a cross site request forgery vulnerability. A malicious actor can trick a user…
CVE-2022-22954 - CVSS 9.8 (critical), 2022-04-11: VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious actor with…
CVE-2021-22035 - CVSS 4.3 (medium), 2021-10-13: VMware vRealize Log Insight (8.x prior to 8.6) contains a CSV(Comma Separated Value) injection vulnerability in interactive analytics export function. An…
CVE-2021-22033 - CVSS 2.7 (low), 2021-10-13: Releases prior to VMware vRealize Operations 8.6 contain a Server Side Request Forgery (SSRF) vulnerability.
CVE-2021-22003 - CVSS 7.5 (high), 2021-08-31: VMware Workspace ONE Access and Identity Manager, unintentionally provide a login interface on port 7443. A malicious actor with network access to port 7443…
CVE-2021-22002 - CVSS 9.8 (critical), 2021-08-31: VMware Workspace ONE Access and Identity Manager, allow the /cfg web app and diagnostic endpoints, on port 8443, to be accessed via port 443 using a custom…
CVE-2021-22024 - CVSS 7.5 (high), 2021-08-30: The vRealize Operations Manager API (8.x prior to 8.5) contains an arbitrary log-file read vulnerability. An unauthenticated malicious actor with network…
CVE-2021-22027 - CVSS 7.5 (high), 2021-08-30: The vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in an end point. An unauthenticated malicious actor with network…
CVE-2021-22023 - CVSS 7.2 (high), 2021-08-30: The vRealize Operations Manager API (8.x prior to 8.5) has insecure object reference vulnerability. A malicious actor with administrative access to vRealize…
CVE-2021-22026 - CVSS 7.5 (high), 2021-08-30: The vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in an end point. An unauthenticated malicious actor with network…
CVE-2021-22022 - CVSS 4.9 (medium), 2021-08-30: The vRealize Operations Manager API (8.x prior to 8.5) contains an arbitrary file read vulnerability. A malicious actor with administrative access to vRealize…
CVE-2021-22025 - CVSS 7.5 (high), 2021-08-30: The vRealize Operations Manager API (8.x prior to 8.5) contains a broken access control vulnerability leading to unauthenticated API access. An…
CVE-2021-21983 - CVSS 6.5 (medium), 2021-03-31: Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authenticated malicious actor with network…
CVE-2021-21975 - CVSS 9.8 (critical), 2021-03-31: Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor with network access to the vRealize…
CVE-2020-4006 - CVSS 9.1 (critical), 2020-11-23: VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command injection vulnerability.