Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2022-05-20	CVE-2022-22972	Unspecified vulnerability in VMWare products VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. network low complexity vmware critical	9.8
2022-04-11	CVE-2022-22954	Code Injection vulnerability in VMWare products VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. network low complexity vmware CWE-94 critical	9.8
2021-08-31	CVE-2021-22002	Improper Authentication vulnerability in VMWare products VMware Workspace ONE Access and Identity Manager, allow the /cfg web app and diagnostic endpoints, on port 8443, to be accessed via port 443 using a custom host header. network low complexity vmware CWE-287 critical	9.8
2020-11-23	CVE-2020-4006	OS Command Injection vulnerability in VMWare products VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command injection vulnerability. network low complexity vmware CWE-78 critical	9.1