GCVE - cpe:2.3:a:vmware:identity_manager:3.3.3:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:vmware:identity_manager:3.3.3:*:*:*:*:*:*:*

part: a version: 3.3.3 update: *

Vendor	Vmware (`7bb62c7c-2241-5a0b-8dbc-5f13251fb24e`)
Product	Identity Manager (`b8e019a0-ad93-53e9-9552-759aa4515bfb`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-22973`	vulnerable	2026-06-08 05:40:55.846381	Details available VMware Workspace ONE Access and Identity Manager contain a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'. Published: 2022-05-20T20:18:27.000Z Updated: 2024-08-03T03:28:42.587Z Open on db.gcve.eu Reference links https://www.vmware.com/security/advisories/VMSA-2022-0014.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-22972`	vulnerable	2026-06-08 05:40:55.809284	Details available VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the need to authenticate. Published: 2022-05-20T20:18:39.000Z Updated: 2024-08-03T03:28:42.716Z Open on db.gcve.eu Reference links https://www.vmware.com/security/advisories/VMSA-2022-0014.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-22961`	vulnerable	2026-06-08 05:40:55.698850	Details available VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an information disclosure vulnerability due to returning excess information. A malicious actor with remote access may leak the hostname of the target system. Successful exploitation of this issue can lead to targeting victims. Published: 2022-04-13T17:05:56.000Z Updated: 2024-08-03T03:28:42.477Z Open on db.gcve.eu Reference links https://www.vmware.com/security/advisories/VMSA-2022-0011.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-22960`	vulnerable	2026-06-08 05:40:55.697957	Details available VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts. A malicious actor with local access can escalate privileges to 'root'. Published: 2022-04-13T00:00:00.000Z Updated: 2025-10-21T23:15:42.338Z Open on db.gcve.eu Reference links https://www.vmware.com/security/advisories/VMSA-2022-0011.html http://packetstormsecurity.com/files/171918/Mware-Workspace-ONE-Remote-Code-Execution.html http://packetstormsecurity.com/files/171918/VMware-Workspace-ONE-Remote-Code-Execution.html http://packetstormsecurity.com/files/171935/VMware-Workspace-ONE-Access-Privilege-Escalation.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-22959`	vulnerable	2026-06-08 05:40:55.696937	Details available VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a cross site request forgery vulnerability. A malicious actor can trick a user through a cross site request forgery to unintentionally validate a malicious JDBC URI. Published: 2022-04-13T17:05:54.000Z Updated: 2024-08-03T03:28:42.618Z Open on db.gcve.eu Reference links https://www.vmware.com/security/advisories/VMSA-2022-0011.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-22958`	vulnerable	2026-06-08 05:40:55.692787	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-22957`	vulnerable	2026-06-08 05:40:55.692021	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-22956`	vulnerable	2026-06-08 05:40:55.687661	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-22955`	vulnerable	2026-06-08 05:40:55.686902	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-22954`	vulnerable	2026-06-08 05:40:55.678258	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-22056`	vulnerable	2026-06-08 05:29:59.774770	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-22003`	vulnerable	2026-06-08 05:29:59.617593	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-22002`	vulnerable	2026-06-08 05:29:59.608487	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-4006`	vulnerable	2026-06-08 05:25:58.699185	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.