Lucene search
HistoryNov 09, 2022 - 9:15 p.m.
CVE-2022-31688
cve-2022-31688
reflected cross-site scripting
user input sanitization
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
31.1%
VMware Workspace ONE Assist prior to 22.10 contains a Reflected cross-site scripting (XSS) vulnerability. Due to improper user input sanitization, a malicious actor with some user interaction may be able to inject javascript code in the target user’s window.
Affected configurations
Node
vmwareworkspace_one_assistRange<22.10
| Vendor | Product | Version | CPE |
|---|---|---|---|
| vmware | workspace_one_assist | * | cpe:2.3:a:vmware:workspace_one_assist:*:*:*:*:*:*:*:* |
Related
prion
prion
Cross site scripting
2022-11-09 21:15:00
cvelist
cvelist
CVE-2022-31688
2022-11-09 00:00:00
cve
cve
CVE-2022-31688
2022-11-09 21:15:15
vmware
vmware
VMware Workspace ONE Assist update addresses multiple vulnerabilities.
2022-11-08 00:00:00
nessus
nessus
VMware Workspace One Assist Multiple Vulnerabilities (VMSA-2022-0028)
2022-11-16 00:00:00
thn
thn
VMware Warns of 3 New Critical Flaws Affecting Workspace ONE Assist Software
2022-11-09 06:04:00
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
31.1%
Related for NVD:CVE-2022-31688