Search
Find a vulnerability
Search criteria
4 vulnerabilities found for workspace_one_uem by vmware
CVE-2024-22260 (GCVE-0-2024-22260)
Vulnerability from nvd – Published: 2024-06-27 20:18 – Updated: 2025-03-19 17:17
VLAI
EPSS
VEX
Summary
VMware Workspace One UEM update addresses an information exposure vulnerability.
A malicious actor with network access to the Workspace One UEM may be
able to perform an attack resulting in an information exposure.
Severity
6.8 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-06-28 14:48 UTC
CWE
- Information exposure vulnerability
- CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
Assigner
References
1 reference
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| N/A | VMware Workspace One UEM |
Affected:
VMware Workspace One UEM 23.10.x, VMware Workspace One UEM 23.6.x, VMware Workspace One UEM 23.4.x, VMware Workspace One UEM 22.12.x
|
|
| vmware | workspace_one_uem |
Affected:
23.10x
cpe:2.3:a:vmware:workspace_one_uem:*:*:*:*:*:*:*:* |
|
| vmware | workspace_one_uem |
Affected:
23.6x
cpe:2.3:a:vmware:workspace_one_uem:*:*:*:*:*:*:*:* |
|
| vmware | workspace_one_uem |
Affected:
23.4x
cpe:2.3:a:vmware:workspace_one_uem:*:*:*:*:*:*:*:* |
|
| vmware | workspace_one_uem |
Affected:
22.12x
cpe:2.3:a:vmware:workspace_one_uem:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:vmware:workspace_one_uem:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "workspace_one_uem",
"vendor": "vmware",
"versions": [
{
"status": "affected",
"version": "23.10x"
}
]
},
{
"cpes": [
"cpe:2.3:a:vmware:workspace_one_uem:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "workspace_one_uem",
"vendor": "vmware",
"versions": [
{
"status": "affected",
"version": "23.6x"
}
]
},
{
"cpes": [
"cpe:2.3:a:vmware:workspace_one_uem:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "workspace_one_uem",
"vendor": "vmware",
"versions": [
{
"status": "affected",
"version": "23.4x"
}
]
},
{
"cpes": [
"cpe:2.3:a:vmware:workspace_one_uem:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "workspace_one_uem",
"vendor": "vmware",
"versions": [
{
"status": "affected",
"version": "22.12x"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-22260",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-06-28T14:48:16.804419Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-200",
"description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-03-19T17:17:41.489Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-01T22:43:33.664Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.vmware.com/security/advisories/OMSA-2024-0001.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "VMware Workspace One UEM",
"vendor": "N/A",
"versions": [
{
"status": "affected",
"version": "VMware Workspace One UEM 23.10.x, VMware Workspace One UEM 23.6.x, VMware Workspace One UEM 23.4.x, VMware Workspace One UEM 22.12.x"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\nVMware Workspace One UEM update addresses an information exposure vulnerability.\u0026nbsp;\nA malicious actor with network access to the Workspace One UEM may be \nable to perform an attack resulting in an information exposure.\n\n\n\n"
}
],
"value": "VMware Workspace One UEM update addresses an information exposure vulnerability.\u00a0\nA malicious actor with network access to the Workspace One UEM may be \nable to perform an attack resulting in an information exposure."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Information exposure vulnerability",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-06-27T20:18:58.176Z",
"orgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d",
"shortName": "vmware"
},
"references": [
{
"url": "https://www.vmware.com/security/advisories/OMSA-2024-0001.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d",
"assignerShortName": "vmware",
"cveId": "CVE-2024-22260",
"datePublished": "2024-06-27T20:18:58.176Z",
"dateReserved": "2024-01-08T18:43:15.943Z",
"dateUpdated": "2025-03-19T17:17:41.489Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-20886 (GCVE-0-2023-20886)
Vulnerability from nvd – Published: 2023-10-31 20:44 – Updated: 2024-09-12 19:58
VLAI
EPSS
VEX
Summary
VMware Workspace ONE UEM console contains an open redirect vulnerability.
A malicious actor may be able to redirect a victim to an attacker and retrieve their SAML response to login as the victim user.
Severity
8.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-09-06 14:25 UTC
CWE
- CWE-601 - URL Redirection to Untrusted Site ('Open Redirect')
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| n/a | VMware Workspace ONE UEM Console |
Unaffected:
Workspace ONE UEM 23.6.0.0
Affected: Workspace ONE UEM 23.2.0.0 Affected: Workspace ONE UEM 22.12.0.0 Affected: Workspace ONE UEM 22.9.0.0 Affected: Workspace ONE UEM 22.6.0.0 Affected: Workspace ONE UEM 22.3.0.0 |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T09:21:33.073Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.vmware.com/security/advisories/VMSA-2023-0025.html"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-20886",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-09-06T14:25:05.396568Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-09-12T19:58:57.003Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "VMware Workspace ONE UEM Console",
"vendor": "n/a",
"versions": [
{
"status": "unaffected",
"version": "Workspace ONE UEM 23.6.0.0"
},
{
"status": "affected",
"version": "Workspace ONE UEM 23.2.0.0"
},
{
"status": "affected",
"version": "Workspace ONE UEM 22.12.0.0"
},
{
"status": "affected",
"version": "Workspace ONE UEM 22.9.0.0"
},
{
"status": "affected",
"version": "Workspace ONE UEM 22.6.0.0"
},
{
"status": "affected",
"version": "Workspace ONE UEM 22.3.0.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\nVMware Workspace ONE UEM console contains an open redirect vulnerability.\n\n\nA malicious actor may be able to redirect a victim to an attacker and retrieve their SAML response to login as the victim user.\n\n"
}
],
"value": "VMware Workspace ONE UEM console contains an open redirect vulnerability.\n\n\nA malicious actor may be able to redirect a victim to an attacker and retrieve their SAML response to login as the victim user.\n\n"
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-601",
"description": "CWE-601 URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-10-31T20:44:50.773Z",
"orgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d",
"shortName": "vmware"
},
"references": [
{
"url": "https://www.vmware.com/security/advisories/VMSA-2023-0025.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d",
"assignerShortName": "vmware",
"cveId": "CVE-2023-20886",
"datePublished": "2023-10-31T20:44:50.773Z",
"dateReserved": "2022-11-01T15:41:50.394Z",
"dateUpdated": "2024-09-12T19:58:57.003Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-22260 (GCVE-0-2024-22260)
Vulnerability from cvelistv5 – Published: 2024-06-27 20:18 – Updated: 2025-03-19 17:17
VLAI
EPSS
VEX
Summary
VMware Workspace One UEM update addresses an information exposure vulnerability.
A malicious actor with network access to the Workspace One UEM may be
able to perform an attack resulting in an information exposure.
Severity
6.8 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-06-28 14:48 UTC
CWE
- Information exposure vulnerability
- CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
Assigner
References
1 reference
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| N/A | VMware Workspace One UEM |
Affected:
VMware Workspace One UEM 23.10.x, VMware Workspace One UEM 23.6.x, VMware Workspace One UEM 23.4.x, VMware Workspace One UEM 22.12.x
|
|
| vmware | workspace_one_uem |
Affected:
23.10x
cpe:2.3:a:vmware:workspace_one_uem:*:*:*:*:*:*:*:* |
|
| vmware | workspace_one_uem |
Affected:
23.6x
cpe:2.3:a:vmware:workspace_one_uem:*:*:*:*:*:*:*:* |
|
| vmware | workspace_one_uem |
Affected:
23.4x
cpe:2.3:a:vmware:workspace_one_uem:*:*:*:*:*:*:*:* |
|
| vmware | workspace_one_uem |
Affected:
22.12x
cpe:2.3:a:vmware:workspace_one_uem:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:vmware:workspace_one_uem:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "workspace_one_uem",
"vendor": "vmware",
"versions": [
{
"status": "affected",
"version": "23.10x"
}
]
},
{
"cpes": [
"cpe:2.3:a:vmware:workspace_one_uem:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "workspace_one_uem",
"vendor": "vmware",
"versions": [
{
"status": "affected",
"version": "23.6x"
}
]
},
{
"cpes": [
"cpe:2.3:a:vmware:workspace_one_uem:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "workspace_one_uem",
"vendor": "vmware",
"versions": [
{
"status": "affected",
"version": "23.4x"
}
]
},
{
"cpes": [
"cpe:2.3:a:vmware:workspace_one_uem:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "workspace_one_uem",
"vendor": "vmware",
"versions": [
{
"status": "affected",
"version": "22.12x"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-22260",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-06-28T14:48:16.804419Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-200",
"description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-03-19T17:17:41.489Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-01T22:43:33.664Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.vmware.com/security/advisories/OMSA-2024-0001.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "VMware Workspace One UEM",
"vendor": "N/A",
"versions": [
{
"status": "affected",
"version": "VMware Workspace One UEM 23.10.x, VMware Workspace One UEM 23.6.x, VMware Workspace One UEM 23.4.x, VMware Workspace One UEM 22.12.x"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\nVMware Workspace One UEM update addresses an information exposure vulnerability.\u0026nbsp;\nA malicious actor with network access to the Workspace One UEM may be \nable to perform an attack resulting in an information exposure.\n\n\n\n"
}
],
"value": "VMware Workspace One UEM update addresses an information exposure vulnerability.\u00a0\nA malicious actor with network access to the Workspace One UEM may be \nable to perform an attack resulting in an information exposure."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Information exposure vulnerability",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-06-27T20:18:58.176Z",
"orgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d",
"shortName": "vmware"
},
"references": [
{
"url": "https://www.vmware.com/security/advisories/OMSA-2024-0001.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d",
"assignerShortName": "vmware",
"cveId": "CVE-2024-22260",
"datePublished": "2024-06-27T20:18:58.176Z",
"dateReserved": "2024-01-08T18:43:15.943Z",
"dateUpdated": "2025-03-19T17:17:41.489Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-20886 (GCVE-0-2023-20886)
Vulnerability from cvelistv5 – Published: 2023-10-31 20:44 – Updated: 2024-09-12 19:58
VLAI
EPSS
VEX
Summary
VMware Workspace ONE UEM console contains an open redirect vulnerability.
A malicious actor may be able to redirect a victim to an attacker and retrieve their SAML response to login as the victim user.
Severity
8.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-09-06 14:25 UTC
CWE
- CWE-601 - URL Redirection to Untrusted Site ('Open Redirect')
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| n/a | VMware Workspace ONE UEM Console |
Unaffected:
Workspace ONE UEM 23.6.0.0
Affected: Workspace ONE UEM 23.2.0.0 Affected: Workspace ONE UEM 22.12.0.0 Affected: Workspace ONE UEM 22.9.0.0 Affected: Workspace ONE UEM 22.6.0.0 Affected: Workspace ONE UEM 22.3.0.0 |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T09:21:33.073Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.vmware.com/security/advisories/VMSA-2023-0025.html"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-20886",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-09-06T14:25:05.396568Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-09-12T19:58:57.003Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "VMware Workspace ONE UEM Console",
"vendor": "n/a",
"versions": [
{
"status": "unaffected",
"version": "Workspace ONE UEM 23.6.0.0"
},
{
"status": "affected",
"version": "Workspace ONE UEM 23.2.0.0"
},
{
"status": "affected",
"version": "Workspace ONE UEM 22.12.0.0"
},
{
"status": "affected",
"version": "Workspace ONE UEM 22.9.0.0"
},
{
"status": "affected",
"version": "Workspace ONE UEM 22.6.0.0"
},
{
"status": "affected",
"version": "Workspace ONE UEM 22.3.0.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\nVMware Workspace ONE UEM console contains an open redirect vulnerability.\n\n\nA malicious actor may be able to redirect a victim to an attacker and retrieve their SAML response to login as the victim user.\n\n"
}
],
"value": "VMware Workspace ONE UEM console contains an open redirect vulnerability.\n\n\nA malicious actor may be able to redirect a victim to an attacker and retrieve their SAML response to login as the victim user.\n\n"
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-601",
"description": "CWE-601 URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-10-31T20:44:50.773Z",
"orgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d",
"shortName": "vmware"
},
"references": [
{
"url": "https://www.vmware.com/security/advisories/VMSA-2023-0025.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d",
"assignerShortName": "vmware",
"cveId": "CVE-2023-20886",
"datePublished": "2023-10-31T20:44:50.773Z",
"dateReserved": "2022-11-01T15:41:50.394Z",
"dateUpdated": "2024-09-12T19:58:57.003Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}