VMware vRealize Suite Lifecycle Manager vulnerabilities

21 CVEs affecting VMware vRealize Suite Lifecycle Manager, 4 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-22973, published 2022-05-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-22954: VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability, published 2022-04-11. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-04-14. EPSS: 100% chance of exploitation in the next 30 days. VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious actor with network access can trigger a server-side…
CVE-2021-21975: VMware Server Side Request Forgery in vRealize Operations Manager API, published 2021-03-31. High severity, CVSS 7.5. Actively exploited: in CISA KEV since 2022-01-18. EPSS: 78% chance of exploitation in the next 30 days. Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API can perform a…
CVE-2022-22960: VMware Multiple Products Privilege Escalation Vulnerability, published 2022-04-13. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-04-15. EPSS: 35.5% chance of exploitation in the next 30 days. VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts. A malicious actor with local access…
CVE-2020-4006: Multiple VMware Products Command Injection Vulnerability, published 2020-11-23. Critical severity, CVSS 9.1. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 17.3% chance of exploitation in the next 30 days. VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command injection vulnerability.
CVE-2021-21983, published 2021-03-31. Medium severity, CVSS 6.5. EPSS: 68.8% chance of exploitation in the next 30 days. Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager…
CVE-2022-22972, published 2022-05-20. Critical severity, CVSS 9.8. EPSS: 56.3% chance of exploitation in the next 30 days. VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may…
CVE-2022-22957, published 2022-04-13. High severity, CVSS 7.2. EPSS: 23.3% chance of exploitation in the next 30 days. VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities (CVE-2022-22957 & CVE-2022-22958). A malicious actor with administrative access…
CVE-2022-22958, published 2022-04-13. High severity, CVSS 7.2. EPSS: 3.1% chance of exploitation in the next 30 days. VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities (CVE-2022-22957 & CVE-2022-22958). A malicious actor with administrative access…
CVE-2022-22973, published 2022-05-20. High severity, CVSS 7.8. EPSS: 2.4% chance of exploitation in the next 30 days. VMware Workspace ONE Access and Identity Manager contain a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'.
CVE-2021-22002, published 2021-08-31. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. VMware Workspace ONE Access and Identity Manager, allow the /cfg web app and diagnostic endpoints, on port 8443, to be accessed via port 443 using a custom host header. A malicious actor with network…

Latest

CVE-2022-22961, published 2022-04-13. Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days. VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an information disclosure vulnerability due to returning excess information. A malicious actor with remote access may…
CVE-2022-22959, published 2022-04-13. Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days. VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a cross site request forgery vulnerability. A malicious actor can trick a user through a cross site request forgery to…
CVE-2021-22035, published 2021-10-13. Medium severity, CVSS 4.3. EPSS: 0.6% chance of exploitation in the next 30 days. VMware vRealize Log Insight (8.x prior to 8.6) contains a CSV(Comma Separated Value) injection vulnerability in interactive analytics export function. An authenticated malicious actor with…
CVE-2021-22033, published 2021-10-13. Low severity, CVSS 2.7. EPSS: 0.6% chance of exploitation in the next 30 days. Releases prior to VMware vRealize Operations 8.6 contain a Server Side Request Forgery (SSRF) vulnerability.