CVE-2023-20886

Severity: medium (CVSS 6.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-10-31 · updated 2026-06-17
Weakness: CWE-601

Description

VMware Workspace ONE UEM console contains an open redirect vulnerability. A malicious actor may be able to redirect a victim to an attacker and retrieve their SAML response to login as the victim user.

Affected products

VMware Workspace One Uem: from 22.3.0.2 before 22.3.0.48; from 22.6.0.1 before 22.6.0.36; from 22.9.0.1 before 22.9.0.29; from 22.12.0.1 before 22.12.0.20; from 23.2.0.1 before 23.2.0.10 — fixed in 22.12.0.20, 22.3.0.48, 22.6.0.36, 22.9.0.29, 23.2.0.10
Vmware Workspace One UEM console: Workspace ONE UEM 23.2.0.0, Workspace ONE UEM 22.12.0.0, Workspace ONE UEM 22.9.0.0, Workspace ONE UEM 22.6.0.0, Workspace ONE UEM 22.3.0.0

How to fix

Upgrade to a fixed version: VMware Workspace One Uem 22.12.0.20, 22.3.0.48, 22.6.0.36, 22.9.0.29. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-20886 or the next vulnerability affects your stack