Identity Manager Connector
Vendor:
First CVE: Nov 23, 2020 · Active for 5 years
13
Total CVEs
More Total CVEs than 92% of tracked products
4.3
Avg CVEs / Year
Higher CVE frequency than 88% of tracked products
7.6
Avg CVSS
Higher Avg CVSS than 63% of tracked products
7.7%
KEV Rate
Higher KEV Rate than 98% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Identity Manager Connector over time
Volume of CVEsAvg CVSS Base Score
First CVE
Nov 23, 2020
5 years ago
Most Recent CVE
May 30, 2023
1,155 days ago
CVE Severity & Scoring
Identity Manager Connector13 CVEs
23%
54%
23%
All CVEs353,240 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local3 (23.1%)
Network10 (76.9%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low13 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None11 (84.6%)
Unknown0 (0.0%)
Required2 (15.4%)
Privileges Required
Low3 (23.1%)
High4 (30.8%)
None6 (46.2%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (13 CVEs).
13 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2020-4006CRITICAL VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command injection vulnerability. | Nov 23, 2020 | 9.1 | 78 | YES | NO |
CVE-2022-31656CRITICAL VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network ac | Aug 5, 2022 | 9.8 | 54 | NO | YES |
CVE-2022-31660HIGH VMware Workspace ONE Access, Identity Manager and vRealize Automation contains a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to | Aug 5, 2022 | 7.8 | 36 | NO | YES |
CVE-2022-31657CRITICAL VMware Workspace ONE Access and Identity Manager contain a URL injection vulnerability. A malicious actor with network access may be able to redirect an authenticated user to an ar | Aug 5, 2022 | 9.8 | 29 | NO | NO |
CVE-2022-31659HIGH VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability. A malicious actor with administrator and network access can trigger a remote code ex | Aug 5, 2022 | 7.2 | 25 | NO | NO |
CVE-2022-31664HIGH VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to ' | Aug 5, 2022 | 7.8 | 24 | NO | NO |
CVE-2022-31662HIGH VMware Workspace ONE Access, Identity Manager, Connectors and vRealize Automation contain a path traversal vulnerability. A malicious actor with network access may be able to acces | Aug 5, 2022 | 7.5 | 24 | NO | NO |
CVE-2022-31658HIGH VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability. A malicious actor with administrator and network access can tri | Aug 5, 2022 | 7.2 | 24 | NO | NO |
CVE-2023-20884MEDIUM VMware Workspace ONE Access and VMware Identity Manager contain an insecure redirect vulnerability. An unauthenticated malicious actor may be able to redirect a victim to an attack | May 30, 2023 | 6.1 | 20 | NO | NO |
CVE-2022-31701MEDIUM VMware Workspace ONE Access and Identity Manager contain a broken authentication vulnerability. VMware has evaluated the severity of this issue to be in the Moderate severity range | Dec 14, 2022 | 5.3 | 20 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (13 CVEs).
CISA KEV
1 CVE
7.7% of CVEs· 98th percentile
Metasploit
1 CVE
7.7% of CVEs· 97th percentile
Nuclei
1 CVE
7.7% of CVEs· 97th percentile
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (13 CVEs).
Media Mentions
Signals from CVEs in this product scope (13 CVEs).
Top CNAs Publishing CVEs For Identity Manager Connector
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 3.3.6 | 11 | 7.6 | 2.8% | 0 | 2 |
| 3.3.5 | 10 | 7.8 | 3.0% | 0 | 2 |
| 3.3.4 | 10 | 7.8 | 3.0% | 0 | 2 |
| 3.3.3 | 1 | 9.1 | 23.8% | 1 | 0 |
| 3.3.2 | 1 | 9.1 | 23.8% | 1 | 0 |
| 3.3.1 | 1 | 9.1 | 23.8% | 1 | 0 |
| 19.03.0.1 | 10 | 7.8 | 3.0% | 0 | 2 |