Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2730▼ 551 respecto a la semana anterior
Críticas / altas1294▼ 234 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)244▼ 258 respecto a la semana anterior
1256 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.8) | 0.33% | — | Vmware Identity ManagerVmware ONE AccessVmware Access ConnectorVmware Identity Manager Connector | 5/8/2022 | 17/6/2026 | VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'. | |
| Modificada | Media (6.1) | 0.67% | — | Vmware Identity ManagerVmware ONE AccessVmware Access ConnectorVmware Identity Manager Connector | 5/8/2022 | 17/6/2026 | VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a reflected cross-site scripting (XSS) vulnerability. Due to improper user input sanitization, a malicious actor with some user interaction may be able to inject javascript code in the target user's window. | |
| Modificada | Alta (7.5) | 1.2% | — | Vmware Identity ManagerVmware ONE AccessVmware Access ConnectorVmware Identity Manager Connector | 5/8/2022 | 17/6/2026 | VMware Workspace ONE Access, Identity Manager, Connectors and vRealize Automation contain a path traversal vulnerability. A malicious actor with network access may be able to access arbitrary files. | |
| Modificada | Alta (7.8) | 0.33% | — | Vmware Identity ManagerVmware ONE AccessVmware Access ConnectorVmware Identity Manager Connector | 5/8/2022 | 17/6/2026 | VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two privilege escalation vulnerabilities. A malicious actor with local access can escalate privileges to 'root'. | |
| Modificada | Alta (7.8) | 1.1% | 💥 Exploit | Vmware Identity ManagerVmware ONE AccessVmware Access ConnectorVmware Identity Manager Connector | 5/8/2022 | 17/6/2026 | VMware Workspace ONE Access, Identity Manager and vRealize Automation contains a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'. | |
| Modificada | Alta (7.2) | 2.9% | — | Vmware Identity ManagerVmware ONE AccessVmware Access ConnectorVmware Identity Manager Connector | 5/8/2022 | 17/6/2026 | VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability. A malicious actor with administrator and network access can trigger a remote code execution. | |
| Modificada | Alta (7.2) | 2.2% | — | Vmware Identity ManagerVmware ONE AccessVmware Access ConnectorVmware Identity Manager Connector | 5/8/2022 | 17/6/2026 | VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability. A malicious actor with administrator and network access can trigger a remote code execution. | |
| Modificada | Crítica (9.8) | 1.4% | — | Vmware Identity ManagerVmware ONE AccessVmware Access ConnectorVmware Identity Manager Connector | 5/8/2022 | 17/6/2026 | VMware Workspace ONE Access and Identity Manager contain a URL injection vulnerability. A malicious actor with network access may be able to redirect an authenticated user to an arbitrary domain. | |
| Modificada | Crítica (9.8) | 24% | 💥 Exploit | Vmware Identity ManagerVmware ONE AccessVmware Access ConnectorVmware Identity Manager Connector | 5/8/2022 | 17/6/2026 | VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the need to authenticate. | |
| Modificada | Media (6.5) | 0.78% | — | Debian LinuxFedoraproject FedoraAMD Athlon X4 750 FirmwareAMD Athlon X4 760k Firmware+122 | 14/7/2022 | 17/6/2026 | Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to information disclosure. | |
| Modificada | Alta (7.5) | 1.0% | — | Vmware Cloud FoundationVmware Vcenter Server | 13/7/2022 | 17/6/2026 | The vCenter Server contains a server-side request forgery (SSRF) vulnerability. A malicious actor with network access to 443 on the vCenter Server may exploit this issue by accessing a URL request outside of vCenter Server or accessing an internal service. | |
| Modificada | Alta (7.8) | 0.71% | — | Microsoft Azure Site Recovery Vmware TO Azure | 12/7/2022 | 17/6/2026 | Azure Site Recovery Elevation of Privilege Vulnerability | |
| Modificada | Alta (8.8) | 1.1% | — | Microsoft Azure Site Recovery Vmware TO Azure | 12/7/2022 | 17/6/2026 | Azure Site Recovery Elevation of Privilege Vulnerability | |
| Modificada | Media (6.5) | 1.9% | — | Microsoft Azure Site Recovery Vmware TO Azure | 12/7/2022 | 17/6/2026 | Azure Site Recovery Elevation of Privilege Vulnerability | |
| Modificada | Media (6.5) | 1.9% | — | Microsoft Azure Site Recovery Vmware TO Azure | 12/7/2022 | 17/6/2026 | Azure Site Recovery Elevation of Privilege Vulnerability | |
| Modificada | Media (4.9) | 2.2% | — | Microsoft Azure Site Recovery Vmware TO Azure | 12/7/2022 | 17/6/2026 | Azure Site Recovery Elevation of Privilege Vulnerability | |
| Modificada | Media (4.9) | 2.2% | — | Microsoft Azure Site Recovery Vmware TO Azure | 12/7/2022 | 17/6/2026 | Azure Site Recovery Elevation of Privilege Vulnerability | |
| Modificada | Media (4.9) | 2.2% | — | Microsoft Azure Site Recovery Vmware TO Azure | 12/7/2022 | 17/6/2026 | Azure Site Recovery Elevation of Privilege Vulnerability | |
| Modificada | Media (6.5) | 2.1% | — | Microsoft Azure Site Recovery Vmware TO Azure | 12/7/2022 | 17/6/2026 | Azure Site Recovery Elevation of Privilege Vulnerability | |
| Modificada | Media (6.5) | 1.9% | — | Microsoft Azure Site Recovery Vmware TO Azure | 12/7/2022 | 17/6/2026 | Azure Site Recovery Elevation of Privilege Vulnerability | |
| Modificada | Media (6.5) | 1.9% | — | Microsoft Azure Site Recovery Vmware TO Azure | 12/7/2022 | 17/6/2026 | Azure Site Recovery Elevation of Privilege Vulnerability | |
| Modificada | Media (4.9) | 2.2% | — | Microsoft Azure Site Recovery Vmware TO Azure | 12/7/2022 | 17/6/2026 | Azure Site Recovery Elevation of Privilege Vulnerability | |
| Modificada | Media (6.5) | 1.9% | — | Microsoft Azure Site Recovery Vmware TO Azure | 12/7/2022 | 17/6/2026 | Azure Site Recovery Elevation of Privilege Vulnerability | |
| Modificada | Media (6.5) | 1.9% | — | Microsoft Azure Site Recovery Vmware TO Azure | 12/7/2022 | 17/6/2026 | Azure Site Recovery Elevation of Privilege Vulnerability | |
| Modificada | Media (6.5) | 1.9% | — | Microsoft Azure Site Recovery Vmware TO Azure | 12/7/2022 | 17/6/2026 | Azure Site Recovery Elevation of Privilege Vulnerability |