Approved changes feed: RSS · Atom

cpe:2.3:a:vmware:identity_manager:3.3.6:*:*:*:*:*:*:*

part: a version: 3.3.6 update: *

VendorVmware (7bb62c7c-2241-5a0b-8dbc-5f13251fb24e)
ProductIdentity Manager (b8e019a0-ad93-53e9-9552-759aa4515bfb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-20884 vulnerable 2026-06-08 05:54:18.035380 Details available
MEDIUM (6.1)
VMware Workspace ONE Access and VMware Identity Manager contain an insecure redirect vulnerability. An unauthenticated malicious actor may be able to redirect a victim to an attacker controlled domain due to improper path handling leading to sensitive information disclosure.
Published: 2023-05-30T15:05:53.284Z
Updated: 2025-01-10T18:58:11.000Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31700 vulnerable 2026-06-08 05:44:41.601494 Details available
VMware Workspace ONE Access and Identity Manager contain an authenticated remote code execution vulnerability. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 7.2.
Published: 2022-12-14T00:00:00.000Z
Updated: 2025-04-22T16:06:25.180Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31665 vulnerable 2026-06-08 05:43:43.387168 Details available
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability. A malicious actor with administrator and network access can trigger a remote code execution.
Published: 2022-08-05T15:06:00.000Z
Updated: 2024-08-03T07:26:00.991Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31664 vulnerable 2026-06-08 05:43:43.386418 Details available
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'.
Published: 2022-08-05T15:06:15.000Z
Updated: 2024-08-03T07:26:01.203Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31663 vulnerable 2026-06-08 05:43:43.385643 Details available
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a reflected cross-site scripting (XSS) vulnerability. Due to improper user input sanitization, a malicious actor with some user interaction may be able to inject javascript code in the target user's window.
Published: 2022-08-05T15:06:30.000Z
Updated: 2024-08-03T07:26:01.099Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31662 vulnerable 2026-06-08 05:43:43.384814 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31661 vulnerable 2026-06-08 05:43:43.380202 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31660 vulnerable 2026-06-08 05:43:43.379554 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31659 vulnerable 2026-06-08 05:43:43.367960 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31658 vulnerable 2026-06-08 05:43:43.366741 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31657 vulnerable 2026-06-08 05:43:43.366036 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31656 vulnerable 2026-06-08 05:43:43.359690 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22973 vulnerable 2026-06-08 05:40:55.846451 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22972 vulnerable 2026-06-08 05:40:55.809543 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22961 vulnerable 2026-06-08 05:40:55.698906 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22960 vulnerable 2026-06-08 05:40:55.698010 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22959 vulnerable 2026-06-08 05:40:55.696996 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22958 vulnerable 2026-06-08 05:40:55.692841 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22957 vulnerable 2026-06-08 05:40:55.692079 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22956 vulnerable 2026-06-08 05:40:55.687840 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22955 vulnerable 2026-06-08 05:40:55.686968 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22954 vulnerable 2026-06-08 05:40:55.680340 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.