Vmware Workspace One Access vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Vmware Workspace One Access: 2 record(s), with affected versions and fixes.
cpe:2.3:a:vmware:workspace_one_access

CVE-2022-22960 High · 7.8 KEV High · 68 Public exploit CWE-732 Apr 13, 2022

VMware Multiple Products Privilege Escalation Vulnerability

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts. A malicious actor with local access can escalate privileges to 'root'.

CVE-2022-22954 Critical · 9.8 KEV Urgent · 93 Public exploit Ransomware CWE-94 Apr 11, 2022

VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious actor with network access can trigger a server-side template injection that may result in remote code execution.