What’s Vulnerable › Vulnerabilities

CVE-2024-22260

• Severity: medium (CVSS 6.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-06-27 · updated 2026-06-17
• Weakness: CWE-200

Description

VMware Workspace One UEM update addresses an information exposure vulnerability.  A malicious actor with network access to the Workspace One UEM may be able to perform an attack resulting in an information exposure.

Affected products

• VMware Workspace One Uem: 23.10x
• VMware Workspace One UEM: VMware Workspace One UEM 23.10.x, VMware Workspace One UEM 23.6.x, VMware Workspace One UEM 23.4.x, VMware Workspace One UEM 22.12.x

References

• https://www.vmware.com/security/advisories/OMSA-2024-0001.html
• https://www.vmware.com/security/advisories/OMSA-2024-0001.html

Get alerted when CVE-2024-22260 or the next vulnerability affects your stack