CyberSecBulletin

VMware Workspace ONE Access vulnerabilities

We track 1 vulnerability in VMware Workspace ONE Access products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 13, 2022.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest VMware Workspace ONE Access vulnerabilities

  • 9.8 Critical severity

    VMware Workspace ONE Access: Improper Authentication

    CVE-2022-22956VMware Workspace ONE AccessEPSS 49.5%

    VMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE-2022-22956) in the OAuth2 ACS framework. A malicious actor may bypass the authentication mechanism and execute any operation due to exposed endpoints in the authent