CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Oracle Identity Manager REST WebServices Authentication Bypass and System Takeover Vulnerability (CVE-2025-61757) Urgent Security Advisory
[Affected Scope] Oracle Fusion Middleware Identity Manager versions 12.2.1.4.0 and 14.1.2.1.0 (REST WebServices component)
[Impact] Unauthenticated remote attackers can bypass authentication via HTTP network access to achieve complete takeover of the Identity Manager system
[Mitigation] Immediately apply the official Oracle Critical Patch Update (CPU) and restrict external access to REST API endpoints
VMware Workspace ONE Access and Identity Manager Local Privilege Escalation (CVE-2022-22960) Technical Advisory
[Affected Scope] VMware Workspace ONE Access, Identity Manager (vIDM), and vRealize Automation (vRA).
[Impact] A local attacker with low-privilege access can exploit improper permissions in support scripts to escalate privileges to root, leading to full system compromise.
[Mitigation] Apply official security patches immediately in accordance with VMware Advisory VMSA-2022-0011.
VMware Workspace ONE Access and Identity Manager Server-Side Template Injection (SSTI) Remote Code Execution Vulnerability (CVE-2022-22954) Analysis and Mitigation Guide
[Affected Scope] Specific versions of VMware Workspace ONE Access and Identity Manager
[Impact] Unauthenticated remote attackers with network access can execute arbitrary system commands on the target server, posing a critical risk (CVSS 9.8)
[Mitigation] Immediately apply the official security patches (VMSA-2022-0011) or implement temporary workarounds to restrict external access
VMware Workspace ONE Access and Identity Manager Command Injection Vulnerability Advisory (CVE-2020-4006)
[Affected Scope] VMware Workspace ONE Access, Access Connector, Identity Manager, and Identity Manager Connector
[Impact] An authenticated attacker with administrative access to the configurator interface can execute arbitrary OS commands with escalated privileges
[Mitigation] Apply the official security patches specified in VMware Advisory VMSA-2020-0027 immediately, or implement the recommended workaround scripts