CVE-2022-31678

VMware Cloud Foundation (NSX-V) contains an XML External Entity (XXE) vulnerability due to incorrect restrictions on XML references to external objects. This flaw affects VCF 3.x instances with NSX-V deployed and can be exploited by a user or unauthenticated malicious actor to trigger service fai...

CVE-2022-31701

CVE-2022-31701 affects VMware Workspace ONE Access and VMware Identity Manager. The Red Hat/VMware/NVD and VMSA details confirm a broken authentication vulnerability exploitable via a network path, with a CVSSv3 base score of 5.3 (Moderate); affected components are the authentication endpoints wh...