[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fn1EEJx0Z1fUIO51UD_HxF3-LBvZXDN5R6-pnFLwke9c":3,"g5a-family:vmware\u002Fone_access":110,"g5a-ex:vmware\u002Fone_access@*":111},{"success":4,"data":5},true,{"product":6,"versions":26,"topVulnerabilitiesByEpss":31,"kevVulnerabilities":82,"seoMetadata":88,"meta":107},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":25},"vmware","one_access",4,11,1,"2022-08-05",[14,16,18,23],{"version":15,"cve_count":11,"kev_count":11,"has_kev":4},"20.01",{"version":17,"cve_count":11,"kev_count":11,"has_kev":4},"20.10",{"version":19,"cve_count":20,"kev_count":21,"has_kev":22},"21.08.0.0",10,0,false,{"version":24,"cve_count":20,"kev_count":21,"has_kev":22},"21.08.0.1","One Access by Vmware is a technology product with 4 tracked versions and 11 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[27,28,29,30],{"version":15,"cve_count":11,"kev_count":11,"has_kev":4},{"version":17,"cve_count":11,"kev_count":11,"has_kev":4},{"version":19,"cve_count":20,"kev_count":21,"has_kev":22},{"version":24,"cve_count":20,"kev_count":21,"has_kev":22},[32,39,45,51,55,58,62,67,72,78],{"cveId":33,"description":34,"publishedDate":12,"cvssScore":35,"cvssVersion":36,"severity":37,"isKev":22,"epssScore":38},"CVE-2022-31656","VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the need to authenticate.",9.8,"v3.1","Critical",0.24338,{"cveId":40,"description":41,"publishedDate":42,"cvssScore":43,"cvssVersion":36,"severity":37,"isKev":4,"epssScore":44},"CVE-2020-4006","VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command injection vulnerability.","2020-11-23",9.1,0.17302,{"cveId":46,"description":47,"publishedDate":12,"cvssScore":48,"cvssVersion":36,"severity":49,"isKev":22,"epssScore":50},"CVE-2022-31659","VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability. A malicious actor with administrator and network access can trigger a remote code execution.",7.2,"High",0.02914,{"cveId":52,"description":53,"publishedDate":12,"cvssScore":48,"cvssVersion":36,"severity":49,"isKev":22,"epssScore":54},"CVE-2022-31665","VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability. A malicious actor with administrator and network access can trigger a remote code execution.",0.02446,{"cveId":56,"description":53,"publishedDate":12,"cvssScore":48,"cvssVersion":36,"severity":49,"isKev":22,"epssScore":57},"CVE-2022-31658",0.02196,{"cveId":59,"description":60,"publishedDate":12,"cvssScore":35,"cvssVersion":36,"severity":37,"isKev":22,"epssScore":61},"CVE-2022-31657","VMware Workspace ONE Access and Identity Manager contain a URL injection vulnerability. A malicious actor with network access may be able to redirect an authenticated user to an arbitrary domain.",0.01357,{"cveId":63,"description":64,"publishedDate":12,"cvssScore":65,"cvssVersion":36,"severity":49,"isKev":22,"epssScore":66},"CVE-2022-31662","VMware Workspace ONE Access, Identity Manager, Connectors and vRealize Automation contain a path traversal vulnerability. A malicious actor with network access may be able to access arbitrary files.",7.5,0.0124,{"cveId":68,"description":69,"publishedDate":12,"cvssScore":70,"cvssVersion":36,"severity":49,"isKev":22,"epssScore":71},"CVE-2022-31660","VMware Workspace ONE Access, Identity Manager and vRealize Automation contains a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'.",7.8,0.01145,{"cveId":73,"description":74,"publishedDate":12,"cvssScore":75,"cvssVersion":36,"severity":76,"isKev":22,"epssScore":77},"CVE-2022-31663","VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a reflected cross-site scripting (XSS) vulnerability. Due to improper user input sanitization, a malicious actor with some user interaction may be able to inject javascript code in the target user's window.",6.1,"Medium",0.00673,{"cveId":79,"description":80,"publishedDate":12,"cvssScore":70,"cvssVersion":36,"severity":49,"isKev":22,"epssScore":81},"CVE-2022-31661","VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two privilege escalation vulnerabilities. A malicious actor with local access can escalate privileges to 'root'.",0.00334,[83],{"cveId":40,"description":41,"publishedDate":42,"cvssScore":43,"severity":37,"isKev":4,"epssScore":44,"cisaVulnName":84,"cisaDateAdded":85,"cisaShortDescription":86,"cisaRequiredAction":87},"Multiple VMware Products Command Injection Vulnerability","2021-11-03","VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector contain a command injection vulnerability. An attacker with network access to the administrative configurator on port 8443 and a valid password for the configurator administrator account can execute commands with unrestricted privileges on the underlying operating system.","Apply updates per vendor instructions.",{"title":89,"metaDescription":90,"keywords":91,"structuredData":92},"One Access by Vmware - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for One Access by Vmware covering 4 versions with 11 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","One Access vulnerabilities, One Access security, One Access CVE, Vmware One Access, One Access threat intelligence, Vmware security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, One Access KEV, One Access exploited vulnerabilities",{"@context":93,"@type":94,"name":95,"description":90,"url":96,"manufacturer":97,"applicationCategory":101,"softwareVersion":102,"mainEntity":103},"https:\u002F\u002Fschema.org","SoftwareApplication","One Access","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fvmware\u002Fone_access",{"@type":98,"name":99,"url":100},"Organization","Vmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fvmware","Security Software","4 versions tracked",{"@type":104,"name":105,"description":106,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","One Access Security Vulnerabilities","Security vulnerabilities affecting One Access by Vmware",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":108,"apiVersion":109},"2026-10-17T20:55:32.567Z","3.0",[],{"rows":112,"total":11,"capped":22,"failed":21},[113],{"cveId":40,"name":84,"severity":37,"cvss":43,"added":85,"epss":44,"published":114,"ranges":115,"checked":4,"hits":116,"covers":22},"2020-11-23T22:15:12.663",[15,17],[]]