Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

vmware vrealize suite lifecycle manager vulnerabilities and exploits

(subscribe to this query)
642
VMScore
CVE-2022-22973
VMware Workspace ONE Access and Identity Manager contain a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'.
Vmware Identity Manager 3.3.3Vmware Identity Manager 3.3.4Vmware Identity Manager 3.3.5Vmware Identity Manager 3.3.6Vmware Workspace One Access 20.10.0.0Vmware Workspace One Access 20.10.0.1Vmware Workspace One Access 21.08.0.0Vmware Workspace One Access 21.08.0.1Vmware Cloud Foundation 4.0Vmware Cloud Foundation 4.0.1Vmware Vrealize Suite Lifecycle Manager 8.0Vmware Vrealize Suite Lifecycle Manager 8.0.1Vmware Vrealize Suite Lifecycle Manager 8.1Vmware Vrealize Suite Lifecycle Manager 8.2Vmware Cloud Foundation 4.1Vmware Cloud Foundation 4.2.1Vmware Cloud Foundation 4.1.0.1Vmware Cloud Foundation 4.3.1Vmware Cloud Foundation 4.3Vmware Cloud Foundation 4.2Vmware Vrealize Suite Lifecycle Manager 8.8Vmware Vrealize Suite Lifecycle Manager 8.7
445
VMScore
CVE-2021-22027
The vRealize Operations Manager API (8.x before 8.5) contains a Server Side Request Forgery in an end point. An unauthenticated malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack leading to information discl...
Vmware Cloud FoundationVmware Vrealize Operations Manager 7.5.0Vmware Vrealize Operations ManagerVmware Vrealize Suite Lifecycle Manager
578
VMScore
CVE-2021-22023
The vRealize Operations Manager API (8.x before 8.5) has insecure object reference vulnerability. A malicious actor with administrative access to vRealize Operations Manager API may be able to modify other users information leading to an account takeover.
Vmware Cloud FoundationVmware Vrealize Operations Manager 7.5.0Vmware Vrealize Operations ManagerVmware Vrealize Suite Lifecycle Manager
445
VMScore
CVE-2021-22026
The vRealize Operations Manager API (8.x before 8.5) contains a Server Side Request Forgery in an end point. An unauthenticated malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack leading to information discl...
Vmware Cloud FoundationVmware Vrealize Operations Manager 7.5.0Vmware Vrealize Operations ManagerVmware Vrealize Suite Lifecycle Manager
356
VMScore
CVE-2021-22022
The vRealize Operations Manager API (8.x before 8.5) contains an arbitrary file read vulnerability. A malicious actor with administrative access to vRealize Operations Manager API can read any arbitrary file on server leading to information disclosure.
Vmware Cloud FoundationVmware Vrealize Operations Manager 7.5.0Vmware Vrealize Operations ManagerVmware Vrealize Suite Lifecycle Manager
445
VMScore
CVE-2021-22024
The vRealize Operations Manager API (8.x before 8.5) contains an arbitrary log-file read vulnerability. An unauthenticated malicious actor with network access to the vRealize Operations Manager API can read any log file resulting in sensitive information disclosure.
Vmware Cloud FoundationVmware Vrealize Operations Manager 7.5.0Vmware Vrealize Operations ManagerVmware Vrealize Suite Lifecycle Manager
445
VMScore
CVE-2021-22025
The vRealize Operations Manager API (8.x before 8.5) contains a broken access control vulnerability leading to unauthenticated API access. An unauthenticated malicious actor with network access to the vRealize Operations Manager API can add new nodes to existing vROps cluster.
Vmware Cloud FoundationVmware Vrealize Operations Manager 7.5.0Vmware Vrealize Operations ManagerVmware Vrealize Suite Lifecycle Manager
670
VMScore
CVE-2022-22972
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the need to authenticate.
Vmware Identity Manager 3.3.3Vmware Identity Manager 3.3.4Vmware Identity Manager 3.3.5Vmware Identity Manager 3.3.6Vmware Vrealize Automation 7.6Vmware Workspace One Access 20.10.0.0Vmware Workspace One Access 20.10.0.1Vmware Workspace One Access 21.08.0.0Vmware Workspace One Access 21.08.0.1Vmware Cloud Foundation 4.0Vmware Cloud Foundation 4.0.1Vmware Vrealize Suite Lifecycle Manager 8.0Vmware Vrealize Suite Lifecycle Manager 8.0.1Vmware Vrealize Suite Lifecycle Manager 8.1Vmware Vrealize Suite Lifecycle Manager 8.2Vmware Cloud Foundation 3.0Vmware Cloud Foundation 3.0.1Vmware Cloud Foundation 3.0.1.1Vmware Cloud Foundation 3.5Vmware Cloud Foundation 3.5.1Vmware Cloud Foundation 3.7Vmware Cloud Foundation 3.7.1
356
VMScore
CVE-2021-22033
Releases prior to VMware vRealize Operations 8.6 contain a Server Side Request Forgery (SSRF) vulnerability.
Vmware Cloud FoundationVmware Vrealize OperationsVmware Vrealize Suite Lifecycle Manager
356
VMScore
CVE-2021-22035
VMware vRealize Log Insight (8.x before 8.6) contains a CSV(Comma Separated Value) injection vulnerability in interactive analytics export function. An authenticated malicious actor with non-administrative privileges may be able to embed untrusted data prior to exporting a CSV sh...
Vmware Cloud FoundationVmware Vrealize Log InsightVmware Vrealize Suite Lifecycle Manager
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook