Vmware Vrealize Suite Lifecycle Manager vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Vmware Vrealize Suite Lifecycle Manager: 4 record(s), with affected versions and fixes.
cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager

CVE-2022-22960 High · 7.8 KEV High · 68 Public exploit CWE-732 Apr 13, 2022

VMware Multiple Products Privilege Escalation Vulnerability

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts. A malicious actor with local access can escalate privileges to 'root'.

CVE-2022-22954 Critical · 9.8 KEV Urgent · 93 Public exploit Ransomware CWE-94 Apr 11, 2022

VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious actor with network access can trigger a server-side template injection that may result in remote code execution.

CVE-2021-21975 High · 7.5 KEV Urgent · 89 Public exploit Ransomware CWE-918 Mar 31, 2021

VMware Server Side Request Forgery in vRealize Operations Manager API

Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack to steal administrative credentials.

CVE-2020-4006 Critical · 9.1 KEV High · 60 CWE-78 Nov 23, 2020

Multiple VMware Products Command Injection Vulnerability

VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command injection vulnerability.