VMware One Access 21.08.0.0

CPE Details

VMware One Access 21.08.0.0
vmware
one_access
21.08.0.0
2022-08-08
15h16 +00:00
2022-08-08
18h43 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:vmware:one_access:21.08.0.0:*:*:*:*:*:*:*

Informations

Vendor

vmware

Product

one_access

Version

21.08.0.0

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2022-31657 2022-08-05 13h07 +00:00 VMware Workspace ONE Access and Identity Manager contain a URL injection vulnerability. A malicious actor with network access may be able to redirect an authenticated user to an arbitrary domain.
9.8
Critique
CVE-2022-31656 2022-08-05 13h07 +00:00 VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the need to authenticate.
9.8
Critique
CVE-2022-31658 2022-08-05 13h07 +00:00 VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability. A malicious actor with administrator and network access can trigger a remote code execution.
7.2
Haute
CVE-2022-31661 2022-08-05 13h06 +00:00 VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two privilege escalation vulnerabilities. A malicious actor with local access can escalate privileges to 'root'.
7.8
Haute
CVE-2022-31659 2022-08-05 13h06 +00:00 VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability. A malicious actor with administrator and network access can trigger a remote code execution.
7.2
Haute
CVE-2022-31663 2022-08-05 13h06 +00:00 VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a reflected cross-site scripting (XSS) vulnerability. Due to improper user input sanitization, a malicious actor with some user interaction may be able to inject javascript code in the target user's window.
6.1
Moyen
CVE-2022-31664 2022-08-05 13h06 +00:00 VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'.
7.8
Haute
CVE-2022-31665 2022-08-05 13h06 +00:00 VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability. A malicious actor with administrator and network access can trigger a remote code execution.
7.2
Haute
CVE-2022-31660 2022-08-05 13h05 +00:00 VMware Workspace ONE Access, Identity Manager and vRealize Automation contains a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'.
7.8
Haute
CVE-2022-31662 2022-08-05 13h05 +00:00 VMware Workspace ONE Access, Identity Manager, Connectors and vRealize Automation contain a path traversal vulnerability. A malicious actor with network access may be able to access arbitrary files.
7.5
Haute