7.5
Élevée
CVE-2021-22054 Omnissa Workspace ONE Server-Side Request Forgery
Exploitation active constatée
· catalogue CISA KEV
Action attendue
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Campagnes de rançongiciel
Non constatée à ce jour
Faiblesse
CWE-918
Description
VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and 21.5.0 prior to 21.5.0.37 contain an SSRF vulnerability. This issue may allow a malicious actor with network access to UEM to send their requests without authentication and to gain access to sensitive information.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Vmware Workspace One UEM console | Versions non publiées |
Autres CVE de Vmware Workspace One UEM console
Les 4 CVE de Vmware Workspace One UEM console →
CVE-2023-20886
VMware Workspace ONE UEM console contains an open redirect vulnerability
8.8
Élevée
CVE-2021-22029
VMware Workspace ONE UEM REST API contains a denial of service vulnerability
Non notée
CVE-2021-21990
VMware Workspace one UEM console (2102 prior to 21.2.0.8, 2101 prior to 21.1.0.14, 2011 prior to 20.11.0.27, 2010…
Non notée