Known vulnerabilities in VMware Identity Manager 3.3.2

Vendor: Broadcom
Version: 3.3.2
Software CPE: cpe:2.3:a:broadcom:identity_manager:*:*:*:*:*:*:*:*
Total vulnerabilities: 4
Public exploits: 1
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting VMware Identity Manager version 3.3.2 VMware Identity Manager 3.3.2 is affected by 4 vulnerabilities: 1 critical, 1 high, 1 medium, 1 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228
CWE-94 Critical
Public exploit available
Exploited
- 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 338 more
#VU55616 - Unprotected primary channel
CVE-2021-22003
CWE-419 Low
No
No
- 05.08.2021 SB2021080524
SB2021080525
SB2021080526
and 2 more
#VU55615 - Server-Side Request Forgery (SSRF)
CVE-2021-22002
CWE-918 High
No
No
- 05.08.2021 SB2021080524
SB2021080525
SB2021080526
and 3 more
#VU48624 - Command injection
CVE-2020-4006
CWE-77 Medium
No
Exploited
- 23.11.2020 SB2020112415