CVE-2021-22054

Producto

Omnissa / Workspace One UEM

Vulnerabilidad

Omnissa Workspace ONE Server-Side Request Forgery

Añadido a KEV

9 mar 2026

Remediar antes de

23 mar 2026

Uso conocido en ransomware

No

Descripción resumida

Omnissa Workspace One UEM formerly known as VMware Workspace One UEM contains a server-side request forgery (SSRF) vulnerability that could allow a malicious actor with network access to UEM to send their requests without authentication and to gain access to sensitive information.

Acción requerida

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://web.archive.org/web/20211222154335/https://www.vmware.com/security/advisories/VMSA-2021-0029.html ; https://nvd.nist.gov/vuln/detail/CVE-2021-22054