CVE-2022-31688

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources
Severity
6.1MEDIUM
EPSS
0.5%
top 34.87%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Vmware Workspace ONE Assist
Timeline
PublishedNov 9
Latest updateNov 10

Description

VMware Workspace ONE Assist prior to 22.10 contains a Reflected cross-site scripting (XSS) vulnerability. Due to improper user input sanitization, a malicious actor with some user interaction may be able to inject javascript code in the target user's window.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages2 packages

▶CVEListV5vmware_workspace_one_assistVMware Workspace ONE Assist prior to 22.10

Patches

Patch: www.vmware.com ↗Patch: www.vmware.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-w7x6-2jq9-cwg8: VMware Workspace ONE Assist prior to 22↗2022-11-10
▶
CVEList
CVE-2022-31688: VMware Workspace ONE Assist prior to 22↗2022-11-09
▶
CVE-2022-31688 (MEDIUM CVSS 6.1) | VMware Workspace ONE Assist prior t | cvebase.io