Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

vmware vrealize suite lifecycle manager 8.1 vulnerabilities and exploits

(subscribe to this query)
7.8
CVSSv3
CVE-2022-22973
VMware Workspace ONE Access and Identity Manager contain a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'.
Vmware Identity Manager 3.3.3Vmware Identity Manager 3.3.4Vmware Identity Manager 3.3.5Vmware Identity Manager 3.3.6Vmware Workspace One Access 20.10.0.0Vmware Workspace One Access 20.10.0.1Vmware Workspace One Access 21.08.0.0Vmware Workspace One Access 21.08.0.1Vmware Cloud Foundation 4.0Vmware Cloud Foundation 4.0.1Vmware Vrealize Suite Lifecycle Manager 8.0Vmware Vrealize Suite Lifecycle Manager 8.0.1Vmware Vrealize Suite Lifecycle Manager 8.1Vmware Vrealize Suite Lifecycle Manager 8.2Vmware Cloud Foundation 4.1Vmware Cloud Foundation 4.2.1Vmware Cloud Foundation 4.1.0.1Vmware Cloud Foundation 4.3.1Vmware Cloud Foundation 4.3Vmware Cloud Foundation 4.2Vmware Vrealize Suite Lifecycle Manager 8.8Vmware Vrealize Suite Lifecycle Manager 8.7
9.8
CVSSv3
CVE-2021-22002
VMware Workspace ONE Access and Identity Manager, allow the /cfg web app and diagnostic endpoints, on port 8443, to be accessed via port 443 using a custom host header. A malicious actor with network access to port 443 could tamper with host headers to facilitate access to the /c...
Vmware Identity Manager 3.3.2Vmware Identity Manager 3.3.3Vmware Identity Manager 3.3.4Vmware Identity Manager 3.3.5Vmware Workspace One Access 20.01Vmware Workspace One Access 20.10Vmware Workspace One Access 20.10.01Vmware Cloud Foundation 4.0Vmware Cloud Foundation 4.0.1Vmware Cloud Foundation 4.1Vmware Cloud Foundation 4.1.0.1Vmware Cloud Foundation 4.2.1Vmware Vrealize Suite Lifecycle Manager 8.0Vmware Vrealize Suite Lifecycle Manager 8.0.1Vmware Vrealize Suite Lifecycle Manager 8.1Vmware Vrealize Suite Lifecycle Manager 8.2
7.5
CVSSv3
CVE-2021-22003
VMware Workspace ONE Access and Identity Manager, unintentionally provide a login interface on port 7443. A malicious actor with network access to port 7443 may attempt user enumeration or brute force the login endpoint, which may or may not be practical based on lockout policy c...
Vmware Identity Manager 3.3.2Vmware Identity Manager 3.3.3Vmware Identity Manager 3.3.4Vmware Identity Manager 3.3.5Vmware Workspace One Access 20.01Vmware Workspace One Access 20.10Vmware Workspace One Access 20.10.01Vmware Cloud Foundation 4.0Vmware Cloud Foundation 4.0.1Vmware Cloud Foundation 4.1Vmware Cloud Foundation 4.1.0.1Vmware Cloud Foundation 4.2.1Vmware Vrealize Suite Lifecycle Manager 8.0Vmware Vrealize Suite Lifecycle Manager 8.0.1Vmware Vrealize Suite Lifecycle Manager 8.1Vmware Vrealize Suite Lifecycle Manager 8.2
9.8
CVSSv3
CVE-2022-22972
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the need to authenticate.
Vmware Identity Manager 3.3.3Vmware Identity Manager 3.3.4Vmware Identity Manager 3.3.5Vmware Identity Manager 3.3.6Vmware Vrealize Automation 7.6Vmware Workspace One Access 20.10.0.0Vmware Workspace One Access 20.10.0.1Vmware Workspace One Access 21.08.0.0Vmware Workspace One Access 21.08.0.1Vmware Cloud Foundation 4.0Vmware Cloud Foundation 4.0.1Vmware Vrealize Suite Lifecycle Manager 8.0Vmware Vrealize Suite Lifecycle Manager 8.0.1Vmware Vrealize Suite Lifecycle Manager 8.1Vmware Vrealize Suite Lifecycle Manager 8.2Vmware Cloud Foundation 3.0Vmware Cloud Foundation 3.0.1Vmware Cloud Foundation 3.0.1.1Vmware Cloud Foundation 3.5Vmware Cloud Foundation 3.5.1Vmware Cloud Foundation 3.7Vmware Cloud Foundation 3.7.1
7.5
CVSSv3
CVE-2021-21975
Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) before 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack to steal administrative credentials.
Vmware Vrealize Operations Manager 7.0.0Vmware Vrealize Operations Manager 7.5.0Vmware Vrealize Operations Manager 8.0.0Vmware Vrealize Operations Manager 8.0.1Vmware Vrealize Operations Manager 8.1.0Vmware Vrealize Operations Manager 8.1.1Vmware Vrealize Operations Manager 8.2.0Vmware Vrealize Operations Manager 8.3.0Vmware Cloud Foundation 3.0Vmware Cloud Foundation 3.0.1Vmware Cloud Foundation 3.0.1.1Vmware Cloud Foundation 3.5Vmware Cloud Foundation 3.5.1Vmware Cloud Foundation 3.7Vmware Cloud Foundation 3.7.1Vmware Cloud Foundation 3.7.2Vmware Cloud Foundation 3.8Vmware Cloud Foundation 3.8.1Vmware Cloud Foundation 3.9Vmware Cloud Foundation 3.9.1Vmware Cloud Foundation 3.10Vmware Cloud Foundation 4.0
6.5
CVSSv3
CVE-2021-21983
Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) before 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager API can write files to arbitrary locations on the underlying photon operating system...
Vmware Vrealize Operations Manager 7.0.0Vmware Vrealize Operations Manager 7.5.0Vmware Vrealize Operations Manager 8.0.0Vmware Vrealize Operations Manager 8.0.1Vmware Vrealize Operations Manager 8.1.0Vmware Vrealize Operations Manager 8.1.1Vmware Vrealize Operations Manager 8.2.0Vmware Vrealize Operations Manager 8.3.0Vmware Cloud Foundation 3.0Vmware Cloud Foundation 3.0.1Vmware Cloud Foundation 3.0.1.1Vmware Cloud Foundation 3.5Vmware Cloud Foundation 3.5.1Vmware Cloud Foundation 3.7Vmware Cloud Foundation 3.7.1Vmware Cloud Foundation 3.7.2Vmware Cloud Foundation 3.8Vmware Cloud Foundation 3.8.1Vmware Cloud Foundation 3.9Vmware Cloud Foundation 3.9.1Vmware Cloud Foundation 3.10Vmware Cloud Foundation 4.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook