Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
vmware workspace one assist vulnerabilities and exploits
(subscribe to this query)
9.8
CVSSv3
CVE-2022-31686
VMware Workspace ONE Assist before 22.10 contains a Broken Authentication Method vulnerability. A malicious actor with network access to Workspace ONE Assist may be able to obtain administrative access without the need to authenticate to the application.
Vmware Workspace One Assist
1 Article
9.8
CVSSv3
CVE-2022-31687
VMware Workspace ONE Assist before 22.10 contains a Broken Access Control vulnerability. A malicious actor with network access to Workspace ONE Assist may be able to obtain administrative access without the need to authenticate to the application.
Vmware Workspace One Assist
1 Article
9.8
CVSSv3
CVE-2022-31689
VMware Workspace ONE Assist before 22.10 contains a Session fixation vulnerability. A malicious actor who obtains a valid session token may be able to authenticate to the application using that token.
Vmware Workspace One Assist
1 Article
9.8
CVSSv3
CVE-2022-31685
VMware Workspace ONE Assist before 22.10 contains an Authentication Bypass vulnerability. A malicious actor with network access to Workspace ONE Assist may be able to obtain administrative access without the need to authenticate to the application.
Vmware Workspace One Assist
1 Article
6.1
CVSSv3
CVE-2022-31688
VMware Workspace ONE Assist before 22.10 contains a Reflected cross-site scripting (XSS) vulnerability. Due to improper user input sanitization, a malicious actor with some user interaction may be able to inject javascript code in the target user's window.
Vmware Workspace One Assist
1 Article
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-33572
CVE-2024-24919
CVE-2024-0230
CVE-2024-32714
HTML injection
local file inclusion
CVE-2024-31098
CVE-2024-31244
privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started