VMware Workspace One Access vulnerabilities

15 CVEs affecting VMware Workspace One Access, 2 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-20884, published 2023-05-30.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-22954: VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability, published 2022-04-11. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-04-14. EPSS: 100% chance of exploitation in the next 30 days. VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious actor with network access can trigger a server-side…
CVE-2022-22960: VMware Multiple Products Privilege Escalation Vulnerability, published 2022-04-13. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-04-15. EPSS: 35.5% chance of exploitation in the next 30 days. VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts. A malicious actor with local access…
CVE-2022-22972, published 2022-05-20. Critical severity, CVSS 9.8. EPSS: 56.3% chance of exploitation in the next 30 days. VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may…
CVE-2022-22956, published 2022-04-13. Critical severity, CVSS 9.8. EPSS: 49.5% chance of exploitation in the next 30 days. VMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE-2022-22956) in the OAuth2 ACS framework. A malicious actor may bypass the authentication mechanism and…
CVE-2022-22957, published 2022-04-13. High severity, CVSS 7.2. EPSS: 23.3% chance of exploitation in the next 30 days. VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities (CVE-2022-22957 & CVE-2022-22958). A malicious actor with administrative access…
CVE-2022-22955, published 2022-04-13. Critical severity, CVSS 9.8. EPSS: 7.8% chance of exploitation in the next 30 days. VMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE-2022-22956) in the OAuth2 ACS framework. A malicious actor may bypass the authentication mechanism and…
CVE-2022-22958, published 2022-04-13. High severity, CVSS 7.2. EPSS: 3.1% chance of exploitation in the next 30 days. VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities (CVE-2022-22957 & CVE-2022-22958). A malicious actor with administrative access…
CVE-2022-22973, published 2022-05-20. High severity, CVSS 7.8. EPSS: 2.4% chance of exploitation in the next 30 days. VMware Workspace ONE Access and Identity Manager contain a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'.
CVE-2021-22056, published 2021-12-20. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. VMware Workspace ONE Access 21.08, 20.10.0.1, and 20.10 and Identity Manager 3.3.5, 3.3.4, and 3.3.3 contain an SSRF vulnerability. A malicious actor with network access may be able to make HTTP…
CVE-2021-22002, published 2021-08-31. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. VMware Workspace ONE Access and Identity Manager, allow the /cfg web app and diagnostic endpoints, on port 8443, to be accessed via port 443 using a custom host header. A malicious actor with network…

Latest

CVE-2023-20884, published 2023-05-30. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. VMware Workspace ONE Access and VMware Identity Manager contain an insecure redirect vulnerability. An unauthenticated malicious actor may be able to redirect a victim to an attacker controlled…
CVE-2022-22961, published 2022-04-13. Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days. VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an information disclosure vulnerability due to returning excess information. A malicious actor with remote access may…
CVE-2022-22959, published 2022-04-13. Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days. VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a cross site request forgery vulnerability. A malicious actor can trick a user through a cross site request forgery to…