Approved changes feed: RSS · Atom

cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.2:*:*:*:*:*:*:*

part: a version: 8.2 update: *

VendorVmware (7bb62c7c-2241-5a0b-8dbc-5f13251fb24e)
ProductVrealize Suite Lifecycle Manager (ab709e71-bd05-51fe-95ce-7f30b9ad6b78)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-22973 vulnerable 2026-06-08 05:40:55.846957 Details available
VMware Workspace ONE Access and Identity Manager contain a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'.
Published: 2022-05-20T20:18:27.000Z
Updated: 2024-08-03T03:28:42.587Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22972 vulnerable 2026-06-08 05:40:55.833922 Details available
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the need to authenticate.
Published: 2022-05-20T20:18:39.000Z
Updated: 2024-08-03T03:28:42.716Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22003 vulnerable 2026-06-08 05:29:59.618052 Details available
VMware Workspace ONE Access and Identity Manager, unintentionally provide a login interface on port 7443. A malicious actor with network access to port 7443 may attempt user enumeration or brute force the login endpoint, which may or may not be practical based on lockout policy configuration and password complexity for the target account.
Published: 2021-08-31T21:02:31.000Z
Updated: 2024-08-03T18:30:23.694Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22002 vulnerable 2026-06-08 05:29:59.615622 Details available
VMware Workspace ONE Access and Identity Manager, allow the /cfg web app and diagnostic endpoints, on port 8443, to be accessed via port 443 using a custom host header. A malicious actor with network access to port 443 could tamper with host headers to facilitate access to the /cfg web app, in addition a malicious actor could access /cfg diagnostic endpoints without authentication.
Published: 2021-08-31T21:02:21.000Z
Updated: 2024-08-03T18:30:23.707Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21983 vulnerable 2026-06-08 05:29:59.453600 Details available
Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager API can write files to arbitrary locations on the underlying photon operating system.
Published: 2021-03-31T17:50:36.000Z
Updated: 2024-08-03T18:30:23.722Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21975 vulnerable 2026-06-08 05:29:59.402788 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.