Vrealize Automation vulnerabilities

6 known vulnerabilities in Vrealize Automation from VMware. 6 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  VMware vRealize Orchestrator, VMware vRealize…: Improper Restriction of XML External Entity Reference

  CVE-2023-20855Feb 22, 2023VMware vRealize Orchestrator, VMware vRealize Automation, VMware Cloud FoundationEPSS 1.26%

  VMware vRealize Orchestrator contains an XML External Entity (XXE) vulnerability. A malicious actor, with non-administrative access to vRealize Orchestrator, may be able to use specially crafted input to bypass XML parsing restrictions leading to access to sen

• 7.8 High severity

  VMware Multiple Products Privilege Escalation Exploited

  CVE-2022-22960Apr 13, 2022VMware Workspace ONE Access, Identity Manager and vRealize AutomationEPSS 35.5%

  VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts. A malicious actor with local access can escalate privileges to 'root'.

• 7.2 High severity

  VMware Workspace ONE Access, Identity Manager…: Deserialization of Untrusted Data

  CVE-2022-22958Apr 13, 2022VMware Workspace ONE Access, Identity Manager and vRealize AutomationEPSS 3.07%

  VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities (CVE-2022-22957 & CVE-2022-22958). A malicious actor with administrative access can trigger deserialization of untrusted data through malici

• 7.2 High severity

  VMware Workspace ONE Access, Identity Manager…: Deserialization of Untrusted Data

  CVE-2022-22957Apr 13, 2022VMware Workspace ONE Access, Identity Manager and vRealize AutomationEPSS 23.3%

  VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities (CVE-2022-22957 & CVE-2022-22958). A malicious actor with administrative access can trigger deserialization of untrusted data through malici

• 9.8 Critical severity

  VMware Workspace ONE Access: Improper Authentication

  CVE-2022-22956Apr 13, 2022VMware Workspace ONE AccessEPSS 49.5%

  VMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE-2022-22956) in the OAuth2 ACS framework. A malicious actor may bypass the authentication mechanism and execute any operation due to exposed endpoints in the authent

• 9.8 Critical severity

  VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Exploited

  CVE-2022-22954Apr 11, 2022VMware Workspace ONE Access and Identity ManagerEPSS 100%

  VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious actor with network access can trigger a server-side template injection that may result in remote code execution.