VMware Airwatch vulnerabilities

4 CVEs affecting VMware Airwatch, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-4951, published 2018-01-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-4931, published 2017-11-16. High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days. VMware AirWatch Console 9.x prior to 9.2.0 contains a vulnerability that could allow an authenticated AWC user to add malicious data to an enrolled device's log files. Successful exploitation of this…
CVE-2014-8372, published 2014-12-11. Medium severity, CVSS 4.0. EPSS: 0.9% chance of exploitation in the next 30 days. AirWatch by VMware On-Premise 7.3.x before 7.3.3.0 (FP3) allows remote authenticated users to obtain the organizational information and statistics from arbitrary tenants via vectors involving a…
CVE-2017-4930, published 2017-11-16. Medium severity, CVSS 5.4. EPSS: 0.9% chance of exploitation in the next 30 days. VMware AirWatch Console 9.x prior to 9.2.0 contains a vulnerability that could allow an authenticated AWC user to add a malicious URL to an enrolled device's 'Links' page. Successful exploitation of…
CVE-2017-4951, published 2018-01-29. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. VMware AirWatch Console (9.2.x before 9.2.2 and 9.1.x before 9.1.5) contains a Cross Site Request Forgery vulnerability when accessing the App Catalog. An attacker may exploit this issue by tricking…