* * * * : Security Vulnerabilities

Cpe Name:cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:*:*:*:*:*:*:*:*

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2022-22954	94	Exec Code	2022-04-11	2022-05-03	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious actor with network access can trigger a server-side template injection that may result in remote code execution.
2	CVE-2021-22035	74		2021-10-13	2021-10-20	4.0	None	Remote	Low	???	None	Partial	None
VMware vRealize Log Insight (8.x prior to 8.6) contains a CSV(Comma Separated Value) injection vulnerability in interactive analytics export function. An authenticated malicious actor with non-administrative privileges may be able to embed untrusted data prior to exporting a CSV sheet through Log Insight which could be executed in user's environment.
3	CVE-2021-22033	918		2021-10-13	2021-10-19	4.0	None	Remote	Low	???	Partial	None	None
Releases prior to VMware vRealize Operations 8.6 contain a Server Side Request Forgery (SSRF) vulnerability.
4	CVE-2021-22027	918		2021-08-30	2022-02-01	5.0	None	Remote	Low	Not required	Partial	None	None
The vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in an end point. An unauthenticated malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack leading to information disclosure.
5	CVE-2021-22026	918		2021-08-30	2022-02-01	5.0	None	Remote	Low	Not required	Partial	None	None
The vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in an end point. An unauthenticated malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack leading to information disclosure.
6	CVE-2021-22025	287		2021-08-30	2022-02-01	5.0	None	Remote	Low	Not required	None	Partial	None
The vRealize Operations Manager API (8.x prior to 8.5) contains a broken access control vulnerability leading to unauthenticated API access. An unauthenticated malicious actor with network access to the vRealize Operations Manager API can add new nodes to existing vROps cluster.
7	CVE-2021-22024	532		2021-08-30	2022-02-01	5.0	None	Remote	Low	Not required	Partial	None	None
The vRealize Operations Manager API (8.x prior to 8.5) contains an arbitrary log-file read vulnerability. An unauthenticated malicious actor with network access to the vRealize Operations Manager API can read any log file resulting in sensitive information disclosure.
8	CVE-2021-22023	639		2021-08-30	2022-02-01	6.5	None	Remote	Low	???	Partial	Partial	Partial
The vRealize Operations Manager API (8.x prior to 8.5) has insecure object reference vulnerability. A malicious actor with administrative access to vRealize Operations Manager API may be able to modify other users information leading to an account takeover.
9	CVE-2021-22022	22	Dir. Trav.	2021-08-30	2022-02-01	4.0	None	Remote	Low	???	Partial	None	None
The vRealize Operations Manager API (8.x prior to 8.5) contains an arbitrary file read vulnerability. A malicious actor with administrative access to vRealize Operations Manager API can read any arbitrary file on server leading to information disclosure.
10	CVE-2020-4006	77		2020-11-23	2021-07-21	9.0	None	Remote	Low	???	Complete	Complete	Complete
VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command injection vulnerability.

Total number of vulnerabilities : 10 Page : 1 (This Page)