Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

vmware access connector 22.05 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2022-31660
VMware Workspace ONE Access, Identity Manager and vRealize Automation contains a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'.
Vmware Identity Manager 3.3.4Vmware Identity Manager 3.3.5Vmware Identity Manager 3.3.6Vmware One Access 21.08.0.0Vmware One Access 21.08.0.1Vmware Access Connector 21.08.0.0Vmware Access Connector 21.08.0.1Vmware Access Connector 22.05Vmware Identity Manager Connector 3.3.4Vmware Identity Manager Connector 3.3.5Vmware Identity Manager Connector 3.3.6Vmware Identity Manager Connector 19.03.0.1
NA
CVE-2022-31657
VMware Workspace ONE Access and Identity Manager contain a URL injection vulnerability. A malicious actor with network access may be able to redirect an authenticated user to an arbitrary domain.
Vmware Identity Manager 3.3.4Vmware Identity Manager 3.3.5Vmware Identity Manager 3.3.6Vmware One Access 21.08.0.0Vmware One Access 21.08.0.1Vmware Access Connector 21.08.0.0Vmware Access Connector 21.08.0.1Vmware Access Connector 22.05Vmware Identity Manager Connector 3.3.4Vmware Identity Manager Connector 3.3.5Vmware Identity Manager Connector 3.3.6Vmware Identity Manager Connector 19.03.0.1
NA
CVE-2022-31658
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability. A malicious actor with administrator and network access can trigger a remote code execution.
Vmware Identity Manager 3.3.4Vmware Identity Manager 3.3.5Vmware Identity Manager 3.3.6Vmware One Access 21.08.0.1Vmware One Access 21.08.0.0Vmware Identity Manager Connector 3.3.4Vmware Identity Manager Connector 3.3.5Vmware Identity Manager Connector 3.3.6Vmware Identity Manager Connector 19.03.0.1Vmware Access Connector 21.08.0.1Vmware Access Connector 21.08.0.0Vmware Access Connector 22.05
NA
CVE-2022-31659
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability. A malicious actor with administrator and network access can trigger a remote code execution.
Vmware Identity Manager 3.3.4Vmware Identity Manager 3.3.5Vmware Identity Manager 3.3.6Vmware One Access 21.08.0.1Vmware One Access 21.08.0.0Vmware Identity Manager Connector 3.3.4Vmware Identity Manager Connector 3.3.5Vmware Identity Manager Connector 3.3.6Vmware Identity Manager Connector 19.03.0.1Vmware Access Connector 22.05Vmware Access Connector 22.08.0.1Vmware Access Connector 22.08.0.0
NA
CVE-2022-31661
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two privilege escalation vulnerabilities. A malicious actor with local access can escalate privileges to 'root'.
Vmware Identity Manager 3.3.4Vmware Identity Manager 3.3.5Vmware Identity Manager 3.3.6Vmware One Access 21.08.0.0Vmware One Access 21.08.0.1Vmware Access Connector 21.08.0.0Vmware Access Connector 21.08.0.1Vmware Access Connector 22.05Vmware Identity Manager Connector 3.3.4Vmware Identity Manager Connector 3.3.5Vmware Identity Manager Connector 3.3.6Vmware Identity Manager Connector 19.03.0.1
NA
CVE-2022-31662
VMware Workspace ONE Access, Identity Manager, Connectors and vRealize Automation contain a path traversal vulnerability. A malicious actor with network access may be able to access arbitrary files.
Vmware Identity Manager 3.3.4Vmware Identity Manager 3.3.5Vmware Identity Manager 3.3.6Vmware One Access 21.08.0.1Vmware One Access 21.08.0.0Vmware Identity Manager Connector 3.3.4Vmware Identity Manager Connector 3.3.5Vmware Identity Manager Connector 3.3.6Vmware Identity Manager Connector 19.03.0.1Vmware Access Connector 21.08.0.1Vmware Access Connector 21.08.0.0Vmware Access Connector 22.05
NA
CVE-2022-31663
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a reflected cross-site scripting (XSS) vulnerability. Due to improper user input sanitization, a malicious actor with some user interaction may be able to inject javascript code in the target user'...
Vmware Identity Manager 3.3.4Vmware Identity Manager 3.3.5Vmware Identity Manager 3.3.6Vmware One Access 21.08.0.1Vmware One Access 21.08.0.0Vmware Identity Manager Connector 3.3.4Vmware Identity Manager Connector 3.3.5Vmware Identity Manager Connector 3.3.6Vmware Identity Manager Connector 19.03.0.1Vmware Access Connector 21.08.0.1Vmware Access Connector 21.08.0.0Vmware Access Connector 22.05
NA
CVE-2022-31664
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'.
Vmware Identity Manager 3.3.4Vmware Identity Manager 3.3.5Vmware Identity Manager 3.3.6Vmware One Access 21.08.0.0Vmware One Access 21.08.0.1Vmware Access Connector 21.08.0.0Vmware Access Connector 21.08.0.1Vmware Access Connector 22.05Vmware Identity Manager Connector 3.3.4Vmware Identity Manager Connector 3.3.5Vmware Identity Manager Connector 3.3.6Vmware Identity Manager Connector 19.03.0.1
NA
CVE-2022-31656
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the need to authenticate.
Vmware Identity Manager 3.3.4Vmware Identity Manager 3.3.5Vmware Identity Manager 3.3.6Vmware One Access 21.08.0.0Vmware One Access 21.08.0.1Vmware Access Connector 21.08.0.0Vmware Access Connector 21.08.0.1Vmware Access Connector 22.05Vmware Identity Manager Connector 3.3.4Vmware Identity Manager Connector 3.3.5Vmware Identity Manager Connector 3.3.6Vmware Identity Manager Connector 19.03.0.1
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322administrator privilegesCVE-2024-1579hardcodedCVE-2023-20198CVE-2024-33587CVE-2024-33449CVE-2024-4308HTML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook