CVE-2022-31688

2022-11-0900:00:00

vmware

www.cve.org

vmware workspace one

assist

22.10

cross-site scripting

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

31.1%

JSON

VMware Workspace ONE Assist prior to 22.10 contains a Reflected cross-site scripting (XSS) vulnerability. Due to improper user input sanitization, a malicious actor with some user interaction may be able to inject javascript code in the target user’s window.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "VMware Workspace ONE Assist",
    "versions": [
      {
        "version": "VMware Workspace ONE Assist prior to 22.10",
        "status": "affected"
      }
    ]
  }
]

References

www.vmware.com/security/advisories/VMSA-2022-0028.html