Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2023-05-30	CVE-2023-20884	Open Redirect vulnerability in VMWare products VMware Workspace ONE Access and VMware Identity Manager contain an insecure redirect vulnerability. An unauthenticated malicious actor may be able to redirect a victim to an attacker controlled domain due to improper path handling leading to sensitive information disclosure. network low complexity vmware CWE-601	6.1
2022-04-13	CVE-2022-22959	Cross-Site Request Forgery (CSRF) vulnerability in VMWare products VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a cross site request forgery vulnerability. network low complexity vmware CWE-352	4.3
2022-04-13	CVE-2022-22961	Information Exposure vulnerability in VMWare products VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an information disclosure vulnerability due to returning excess information. network low complexity vmware CWE-200	5.3