Approved changes feed: RSS · Atom

cpe:2.3:a:vmware:vrealize_automation:7.6:*:*:*:*:*:*:*

part: a version: 7.6 update: *

VendorVmware (7bb62c7c-2241-5a0b-8dbc-5f13251fb24e)
ProductVrealize Automation (f6534f95-c109-5ff0-b690-854be4dda5e1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-22972 vulnerable 2026-06-08 05:40:55.809564 Details available
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the need to authenticate.
Published: 2022-05-20T20:18:39.000Z
Updated: 2024-08-03T03:28:42.716Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22961 vulnerable 2026-06-08 05:40:55.698940 Details available
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an information disclosure vulnerability due to returning excess information. A malicious actor with remote access may leak the hostname of the target system. Successful exploitation of this issue can lead to targeting victims.
Published: 2022-04-13T17:05:56.000Z
Updated: 2024-08-03T03:28:42.477Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22960 vulnerable 2026-06-08 05:40:55.698044 Details available
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts. A malicious actor with local access can escalate privileges to 'root'.
Published: 2022-04-13T00:00:00.000Z
Updated: 2025-10-21T23:15:42.338Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22959 vulnerable 2026-06-08 05:40:55.697032 Details available
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a cross site request forgery vulnerability. A malicious actor can trick a user through a cross site request forgery to unintentionally validate a malicious JDBC URI.
Published: 2022-04-13T17:05:54.000Z
Updated: 2024-08-03T03:28:42.618Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22958 vulnerable 2026-06-08 05:40:55.692874 Details available
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities (CVE-2022-22957 & CVE-2022-22958). A malicious actor with administrative access can trigger deserialization of untrusted data through malicious JDBC URI which may result in remote code execution.
Published: 2022-04-13T17:05:58.000Z
Updated: 2024-08-03T03:28:42.552Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22957 vulnerable 2026-06-08 05:40:55.692114 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22956 vulnerable 2026-06-08 05:40:55.687874 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22955 vulnerable 2026-06-08 05:40:55.687147 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22954 vulnerable 2026-06-08 05:40:55.682181 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22056 vulnerable 2026-06-08 05:29:59.776470 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.