VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and 21.5.0 prior to 21.5.0.37 contain an SSRF vulnerability. This issue may allow a malicious actor with network access to UEM to send their requests without authentication and to gain access to sensitive information.
References
| Link | Resource |
|---|---|
| https://www.vmware.com/security/advisories/VMSA-2021-0029.html | Patch Vendor Advisory |
| https://www.vmware.com/security/advisories/VMSA-2021-0029.html | Patch Vendor Advisory |
| https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22054 | US Government Resource |
| https://www.greynoise.io/blog/new-ssrf-exploitation-surge | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
10 Mar 2026, 13:11
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22054 - US Government Resource | |
| References | () https://www.greynoise.io/blog/new-ssrf-exploitation-surge - Third Party Advisory |
09 Mar 2026, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
09 Mar 2026, 14:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
21 Nov 2024, 05:49
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.vmware.com/security/advisories/VMSA-2021-0029.html - Patch, Vendor Advisory |
Information
Published : 2021-12-17 17:15
Updated : 2026-03-10 13:11
NVD link : CVE-2021-22054
Mitre link : CVE-2021-22054
CVE.ORG link : CVE-2021-22054
JSON object : View
Products Affected
vmware
- workspace_one_uem_console
CWE
CWE-918
Server-Side Request Forgery (SSRF)