← Back to browse · API

CVE-2021-22054

Severity
HIGH
CVSS
7.5
EPSS
0.97369
Risk score
59.08
CISA KEV
Yes
PoC
No
Published
2021-12-17
Modified
2026-03-11
First seen
2026-08-07
Aliases
EUVD-2021-9219, GHSA-XQXH-CQ77-R6QH
Products
Omnissa:Workspace One UEM, n/a:Vmware Workspace One UEM console VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and 21.5.0 prior to 21.5.0.37.
Sources
cisa.gov CVE-2021-22054
euvd EUVD-2021-9219

Description

VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and 21.5.0 prior to 21.5.0.37 contain an SSRF vulnerability. This issue may allow a malicious actor with network access to UEM to send their requests without authentication and to gain access to sensitive information.

References