CVE-2021-22054

Published Dec 17, 2021

Last updated 3 months ago

Exploit known CVSS high 7.5

VDI

web application

Network

Server

VMware Workspace ONE UEM console

VMware Workspace ONE

UEM

Overview

AI description

Automated description summarized from trusted sources.

CVE-2021-22054 is a Server-Side Request Forgery (SSRF) vulnerability found in various versions of the VMware Workspace ONE UEM console. This flaw allows a malicious actor with network access to the UEM console to send unauthenticated requests. Exploitation of this vulnerability could enable an attacker to gain access to sensitive information. Affected versions include VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and 21.5.0 prior to 21.5.0.37.

Description: VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and 21.5.0 prior to 21.5.0.37 contain an SSRF vulnerability. This issue may allow a malicious actor with network access to UEM to send their requests without authentication and to gain access to sensitive information.
Source: security@vmware.com
NVD status: Analyzed
Products: workspace_one_uem_console

Risk scores

CVSS 3.1

Type: Primary
Base score: 7.5
Impact score: 3.6
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Severity: HIGH

CVSS 2.0

Type: Primary
Base score: 5
Impact score: 2.9
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:N/A:N

Known exploits

Data from CISA

Vulnerability name: Omnissa Workspace ONE Server-Side Request Forgery
Exploit added on: Mar 9, 2026
Exploit action due: Mar 23, 2026
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Weaknesses

nvd@nist.gov: CWE-918
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-918

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:vmware:workspace_one_uem_console:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "C3AAC724-403A-44F5-9D63-DDDF96896E99",
            "versionEndExcluding": "20.0.8.36",
            "versionStartIncluding": "20.0.8.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:vmware:workspace_one_uem_console:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "7E572CA1-63EF-47F6-875F-EA323322A5DC",
            "versionEndExcluding": "20.11.0.40",
            "versionStartIncluding": "20.11.0.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:vmware:workspace_one_uem_console:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "9D85DEA2-2846-4222-81A6-75F4F09FB068",
            "versionEndExcluding": "21.2.0.27",
            "versionStartIncluding": "21.2.0.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:vmware:workspace_one_uem_console:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "8440AE91-8959-4558-899E-CBD1BD5F073F",
            "versionEndExcluding": "21.5.0.37",
            "versionStartIncluding": "21.5.0.0",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.