Known vulnerabilities in Workspace ONE UEM console

Vendor: Broadcom
Software: Workspace ONE UEM console
Software CPE: cpe:2.3:a:broadcom:workspace_one_uem_console:*:*:*:*:*:*:*:*
Website: https://www.broadcom.com/
Total vulnerabilities: 4
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Workspace ONE UEM console Workspace ONE UEM console is affected by 4 known vulnerabilities: 1 critical, 1 medium, 2 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82609 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-20886		 CWE-601 Low
No
No
 22.3.0.48, 22.6.0.36, 22.9.0.29, 22.12.0.20, 23.2.0.10 31.10.2023 SB20231031110
#VU59044 - Server-Side Request Forgery (SSRF)
CVE-2021-22054		 CWE-918 Critical
Available
No
 20.0.8.36, 20.11.0.40, 21.2.0.27, 21.5.0.37 17.12.2021 SB2021121701
#VU55995 - Improper Control of Interaction Frequency
CVE-2021-22029		 CWE-799 Medium
No
No
 20.0.8.32, 20.1.0.33, 20.5.0.51, 20.11.0.30, 21.2.0.14, 21.5.0.2 19.08.2021 SB2021081917
#VU53606 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21990		 CWE-79 Low
No
No
 19.12.0.24, 20.1.0.32, 20.3.0.23, 20.4.0.21, 20.5.0.46, 20.6.0.19, 20.7.0.14, 20.8.0.28, 20.10.0.16, 20.11.0.27, 21.1.0.14, 21.2.0.8 27.05.2021 SB2021052705