CVE-2021-22054highunder attackCWE-918

CVE-2021-22054: high-severity vulnerability in VMware Workspace ONE UEM console

Published · Updated

Follow this CVE+ Monitor Omnissa Workspace ONE UEM+ Monitor Workspace ONE UEM console

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 7.5epss 100%
from disclosure to weapon168 days
Published on NVDDec 17
1st PoC+168d
CISA KEV+1543d
Action required by CISAfederal deadline: 2026-03-23

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

In short

VMware Workspace ONE UEM console has a flaw that lets attackers send requests to internal systems without logging in, potentially exposing sensitive data. This happens because the application doesn't properly validate where requests are being sent.

Technical detail

Server-Side Request Forgery (SSRF) vulnerability in VMware Workspace ONE UEM console allows unauthenticated network-adjacent attackers to forge requests to internal resources and access sensitive information. The vulnerability exists in versions 20.0.8 before 20.0.8.37, 20.11.0 before 20.11.0.40, 21.2.0 before 21.2.0.27, and 21.5.0 before 21.5.0.37 due to insufficient validation of request destinations.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and 21.5.0 prior to 21.5.0.37 contain an SSRF vulnerability. This issue may allow a malicious actor with network access to UEM to send their requests without authentication and to gain access to sensitive information.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
n/a · VMware Workspace ONE UEM console
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.