VMware

Cloud Foundation

126 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2022-22982

  • EPSS 0.23%
  • Published 13.07.2022 19:15:09
  • Last modified 21.11.2024 06:47:44

The vCenter Server contains a server-side request forgery (SSRF) vulnerability. A malicious actor with network access to 443 on the vCenter Server may exploit this issue by accessing a URL request outside of vCenter Server or accessing an internal se...

9.8

CVE-2022-22972

Warning
  • EPSS 93.72%
  • Published 20.05.2022 21:15:09
  • Last modified 21.11.2024 06:47:43

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the...

7.8

CVE-2022-22973

Warning
  • EPSS 3.39%
  • Published 20.05.2022 21:15:09
  • Last modified 21.11.2024 06:47:43

VMware Workspace ONE Access and Identity Manager contain a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'.

7.2

CVE-2022-22957

  • EPSS 40.7%
  • Published 13.04.2022 18:15:13
  • Last modified 21.11.2024 06:47:41

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities (CVE-2022-22957 & CVE-2022-22958). A malicious actor with administrative access can trigger deserialization of untrusted data thro...

7.2

CVE-2022-22958

  • EPSS 1.86%
  • Published 13.04.2022 18:15:13
  • Last modified 21.11.2024 06:47:41

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities (CVE-2022-22957 & CVE-2022-22958). A malicious actor with administrative access can trigger deserialization of untrusted data thro...

4.3

CVE-2022-22959

  • EPSS 0.46%
  • Published 13.04.2022 18:15:13
  • Last modified 21.11.2024 06:47:41

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a cross site request forgery vulnerability. A malicious actor can trick a user through a cross site request forgery to unintentionally validate a malicious JDBC URI.

7.8

CVE-2022-22960

Warning Exploit
  • EPSS 72.72%
  • Published 13.04.2022 18:15:13
  • Last modified 12.02.2025 20:03:03

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts. A malicious actor with local access can escalate privileges to 'root'.

5.3

CVE-2022-22961

  • EPSS 0.55%
  • Published 13.04.2022 18:15:13
  • Last modified 21.11.2024 06:47:41

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an information disclosure vulnerability due to returning excess information. A malicious actor with remote access may leak the hostname of the target system. Successful exp...

10

CVE-2022-22954

Warning Exploit
  • EPSS 94.46%
  • Published 11.04.2022 20:15:19
  • Last modified 12.03.2025 20:01:47

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious actor with network access can trigger a server-side template injection that may result in remote code ex...

6.5

CVE-2022-22948

Warning
  • EPSS 26.42%
  • Published 29.03.2022 18:15:08
  • Last modified 10.02.2025 19:01:58

The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.