---
id: CVE-2021-22054
title: >-
  VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to
  20.11.0.40, 21.2.0 prior to 21.2.0.27, and 21.5.0 prior to 21.5.0.37 contain
  an SSRF vulnerability
summary: >-
  VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to
  20.11.0.40, 21.2.0 prior to 21.2.0.27, and 21.5.0 prior to 21.5.0.37 contain
  an SSRF vulnerability. This issue may allow a malicious actor with network
  access t…
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
cwe:
  - CWE-918
vendor: vmware
product: workspace_one_uem_console
affected:
  - 'workspace_one_uem_console >= 20.0.8.0, < 20.0.8.36'
  - 'workspace_one_uem_console >= 20.11.0.0, < 20.11.0.40'
  - 'workspace_one_uem_console >= 21.2.0.0, < 21.2.0.27'
  - 'workspace_one_uem_console >= 21.5.0.0, < 21.5.0.37'
patched:
  - workspace_one_uem_console 21.5.0.37
published: '2021-12-17'
updated: '2026-10-01'
sourceUpdated: '2026-10-01T19:17:13.960'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2021-22054'
references:
  - url: 'https://www.vmware.com/security/advisories/VMSA-2021-0029.html'
    label: security@vmware.com
  - url: 'https://www.vmware.com/security/advisories/VMSA-2021-0029.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22054
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
  - url: 'https://www.greynoise.io/blog/new-ssrf-exploitation-surge'
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
  - kev
  - in-the-wild
  - exploit-available
  - cve.org
epss: 0.99677
epssPercentile: 0.9995
kev: true
kevDateAdded: '2026-03-09'
kevDueDate: '2026-03-23'
kevRansomware: false
exploited: true
exploits:
  github: 1
  githubRepos:
    - 'https://github.com/MKSx/CVE-2021-22054'
  nuclei:
    - CVE-2021-22054
  checkedAt: '2026-10-26T21:40:35.173Z'
exploitAvailable: true
ssvc:
  exploitation: active
  automatable: 'yes'
  technicalImpact: total
  timestamp: '2026-03-11T03:55:28.560483Z'
ingestedAt: '2026-10-01T18:55:42.394Z'
---

## Overview

VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and 21.5.0 prior to 21.5.0.37 contain an SSRF vulnerability. This issue may allow a malicious actor with network access to UEM to send their requests without authentication and to gain access to sensitive information.

## Affected

- `workspace_one_uem_console >= 20.0.8.0, < 20.0.8.36`
- `workspace_one_uem_console >= 20.11.0.0, < 20.11.0.40`
- `workspace_one_uem_console >= 21.2.0.0, < 21.2.0.27`
- `workspace_one_uem_console >= 21.5.0.0, < 21.5.0.37`

## Remediation

Upgrade past the affected range:

- `workspace_one_uem_console 21.5.0.37`