CVE-2022-22944

VMware Workspace ONE Boxer contains a stored cross-site scripting XSS vulnerability. Due to insufficient sanitization and validation, in VMware Workspace ONE Boxer calendar event descriptions, a malicious actor can inject script tags to execute arbitrary script within a user's window...

CVE-2022-22944: Improper Neutralization of Input During Web Page Generation

VMware Workspace ONE Boxer contains a stored cross-site scripting XSS vulnerability. Due to insufficient sanitization and validation, in VMware Workspace ONE Boxer calendar event descriptions, a malicious actor can inject script tags to execute arbitrary script within a user's window...

PT-2022-1949

Name of the Vulnerable Software and Affected Versions VMware Workspace ONE Boxer affected versions not specified Description The issue is related to a stored cross-site scripting XSS vulnerability due to insufficient sanitization and validation in calendar event descriptions. This allows a...