Vmware Access Connector — known CVE vulnerabilities

Every CVE whose affected-product data names Vmware Access Connector, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2022-31656 — CVSS 9.8 (critical): VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain…
• CVE-2022-31657 — CVSS 9.8 (critical): VMware Workspace ONE Access and Identity Manager contain a URL injection vulnerability. A malicious actor with network access may be able…
• CVE-2022-31664 — CVSS 7.8 (high): VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability. A malicious actor with…
• CVE-2022-31660 — CVSS 7.8 (high): VMware Workspace ONE Access, Identity Manager and vRealize Automation contains a privilege escalation vulnerability. A malicious actor with…
• CVE-2022-31661 — CVSS 7.8 (high): VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two privilege escalation vulnerabilities. A malicious actor…
• CVE-2022-31662 — CVSS 7.5 (high): VMware Workspace ONE Access, Identity Manager, Connectors and vRealize Automation contain a path traversal vulnerability. A malicious actor…
• CVE-2022-31658 — CVSS 7.2 (high): VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability. A malicious actor with…
• CVE-2022-31659 — CVSS 7.2 (high): VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability. A malicious actor with administrator and…
• CVE-2022-31663 — CVSS 6.1 (medium): VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a reflected cross-site scripting (XSS) vulnerability. Due to…