CVE-2021-22054
VMware Workspace ONE UEM console
Published 17 Dec 2021 · updated 1 Oct 2026 · Analyzed
Exploited in the wild
CISA added this to its Known Exploited Vulnerabilities catalog on 9 Mar 2026, with a remediation deadline of 23 Mar 2026 for US federal agencies.
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Description
VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and 21.5.0 prior to 21.5.0.37 contain an SSRF vulnerability. This issue may allow a malicious actor with network access to UEM to send their requests without authentication and to gain access to sensitive information.
References
- www.vmware.com/security/advisories/VMSA-2021-0029.html · Patch, Vendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22054 · US Government Resource
- www.greynoise.io/blog/new-ssrf-exploitation-surge · Third Party Advisory