VMware Workspace ONE Access, Identity Manager and vRealize Automation vulnerabilities
We track 7 vulnerabilities in VMware Workspace ONE Access, Identity Manager and vRealize Automation products. 7 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on August 5, 2022.
Latest VMware Workspace ONE Access, Identity Manager and vRealize Automation vulnerabilities
- 7.2 High severity
VMware Workspace ONE Access, Identity Manager…: Improper Neutralization of Special Elements in Output Used by a Downstream Component
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability. A malicious actor with administrator and network access can trigger a remote code execution.
- 7.2 High severity
VMware Workspace ONE Access, Identity Manager…: Improper Neutralization of Special Elements used in an SQL Command
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability. A malicious actor with administrator and network access can trigger a remote code execution.
- 7.2 High severity
VMware Workspace ONE Access, Identity Manager…: Improper Neutralization of Special Elements in Output Used by a Downstream Component
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability. A malicious actor with administrator and network access can trigger a remote code execution.
- 9.8 Critical severity
VMware Workspace ONE Access, Identity Manager…: URL Redirection to Untrusted Site
VMware Workspace ONE Access and Identity Manager contain a URL injection vulnerability. A malicious actor with network access may be able to redirect an authenticated user to an arbitrary domain.
- 7.8 High severity
VMware Multiple Products Privilege Escalation Exploited
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts. A malicious actor with local access can escalate privileges to 'root'.
- 7.2 High severity
VMware Workspace ONE Access, Identity Manager…: Deserialization of Untrusted Data
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities (CVE-2022-22957 & CVE-2022-22958). A malicious actor with administrative access can trigger deserialization of untrusted data through malici
- 7.2 High severity
VMware Workspace ONE Access, Identity Manager…: Deserialization of Untrusted Data
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities (CVE-2022-22957 & CVE-2022-22958). A malicious actor with administrative access can trigger deserialization of untrusted data through malici