CVE-2021-22029: VMware Workspace One UEM Console

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

VMware Workspace ONE UEM REST API contains a denial of service vulnerability. A malicious actor with access to /API/system/admins/session could cause an API denial of service due to improper rate limiting.

Affected products

• VMware Workspace One UEM Console: from 20.1.0.0, before 20.1.0.33 (fixed in 20.1.0.33); from 20.5.0.0, before 20.5.0.51 (fixed in 20.5.0.51); from 20.8.0.0, before 20.8.0.32 (fixed in 20.8.0.32); from 20.11.0.0, before 20.11.0.30 (fixed in 20.11.0.30); from 21.2.0.0, before 21.2.0.14 (fixed in 21.2.0.14); from 21.5.0.0, before 21.5.0.2 (fixed in 21.5.0.2)

Published 2021-08-31. Last modified 2026-06-17.