CVE-2021-22054

2021-12-1716:10:18

vmware

www.cve.org

0.758 High

EPSS

Percentile

98.2%

JSON

VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and 21.5.0 prior to 21.5.0.37 contain an SSRF vulnerability. This issue may allow a malicious actor with network access to UEM to send their requests without authentication and to gain access to sensitive information.

CNA Affected

[
  {
    "product": "VMware Workspace ONE UEM console",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and 21.5.0 prior to 21.5.0.37."
      }
    ]
  }
]

References

www.vmware.com/security/advisories/VMSA-2021-0029.html

0.758 High

EPSS

Percentile

98.2%

JSON

Related for CVELIST:CVE-2021-22054