VMware

Vrealize Suite Lifecycle Manager

21 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2022-22973

Warnung
  • EPSS 3.39%
  • Veröffentlicht 20.05.2022 21:15:09
  • Zuletzt bearbeitet 21.11.2024 06:47:43

VMware Workspace ONE Access and Identity Manager contain a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'.

9.8

CVE-2022-22972

Warnung
  • EPSS 93.72%
  • Veröffentlicht 20.05.2022 21:15:09
  • Zuletzt bearbeitet 21.11.2024 06:47:43

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the...

5.3

CVE-2022-22961

  • EPSS 0.55%
  • Veröffentlicht 13.04.2022 18:15:13
  • Zuletzt bearbeitet 21.11.2024 06:47:41

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an information disclosure vulnerability due to returning excess information. A malicious actor with remote access may leak the hostname of the target system. Successful exp...

7.8

CVE-2022-22960

Warnung Exploit
  • EPSS 72.72%
  • Veröffentlicht 13.04.2022 18:15:13
  • Zuletzt bearbeitet 12.02.2025 20:03:03

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts. A malicious actor with local access can escalate privileges to 'root'.

4.3

CVE-2022-22959

  • EPSS 0.46%
  • Veröffentlicht 13.04.2022 18:15:13
  • Zuletzt bearbeitet 21.11.2024 06:47:41

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a cross site request forgery vulnerability. A malicious actor can trick a user through a cross site request forgery to unintentionally validate a malicious JDBC URI.

7.2

CVE-2022-22958

  • EPSS 1.86%
  • Veröffentlicht 13.04.2022 18:15:13
  • Zuletzt bearbeitet 21.11.2024 06:47:41

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities (CVE-2022-22957 & CVE-2022-22958). A malicious actor with administrative access can trigger deserialization of untrusted data thro...

7.2

CVE-2022-22957

  • EPSS 40.7%
  • Veröffentlicht 13.04.2022 18:15:13
  • Zuletzt bearbeitet 21.11.2024 06:47:41

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities (CVE-2022-22957 & CVE-2022-22958). A malicious actor with administrative access can trigger deserialization of untrusted data thro...

10

CVE-2022-22954

Warnung Exploit
  • EPSS 94.46%
  • Veröffentlicht 11.04.2022 20:15:19
  • Zuletzt bearbeitet 12.03.2025 20:01:47

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious actor with network access can trigger a server-side template injection that may result in remote code ex...

4.3

CVE-2021-22035

  • EPSS 0.44%
  • Veröffentlicht 13.10.2021 16:15:07
  • Zuletzt bearbeitet 21.11.2024 05:49:28

VMware vRealize Log Insight (8.x prior to 8.6) contains a CSV(Comma Separated Value) injection vulnerability in interactive analytics export function. An authenticated malicious actor with non-administrative privileges may be able to embed untrusted ...

4

CVE-2021-22033

  • EPSS 0.16%
  • Veröffentlicht 13.10.2021 16:15:07
  • Zuletzt bearbeitet 21.11.2024 05:49:28

Releases prior to VMware vRealize Operations 8.6 contain a Server Side Request Forgery (SSRF) vulnerability.