CVE-2022-47412

Technical details about CVE-2022-47412 are not publicly provided in the connected documents. Monitor for updates.

CVE-2022-47412 ONLYOFFICE Workspace Search Stored XSS

Given a malicious document provided by an attacker, the ONLYOFFICE Workspace DMS is vulnerable to a stored persistent, or "Type II" cross-site scripting XSS condition...

CVE-2022-47412

Given a malicious document provided by an attacker, the ONLYOFFICE Workspace DMS is vulnerable to a stored persistent, or "Type II" cross-site scripting XSS condition...

Ascensio System ONLYOFFICE 跨站脚本漏洞

Ascensio System ONLYOFFICE is an office software from Ascensio System, Latvia. A security vulnerability exists in Ascensio System ONLYOFFICE Workspace DMS. An attacker could exploit this vulnerability to conduct cross-site scripting attacks...

CVE-2022-47412: Improper Neutralization of Input During Web Page Generation

Given a malicious document provided by an attacker, the ONLYOFFICE Workspace DMS is vulnerable to a stored persistent, or "Type II" cross-site scripting XSS condition...

PT-2023-8985

Name of the Vulnerable Software and Affected Versions ONLYOFFICE Workspace DMS affected versions not specified Mayan EDMS DMS affected versions not specified Description The issue is related to a stored cross-site scripting XSS condition. This occurs when a malicious document provided by an...

Softr 跨站脚本漏洞

Softr is a no-code website builder from Softr, Inc. A security vulnerability exists in Softr version v2.0, which stems from the presence of an HTML injection vulnerability via the parameter Work Space Name...

Security Bulletin: IBM Planning Analytics Workspace is affected by vulnerabilties

Summary IBM Planning Analytics Workspace is affected by vulnerabilities. Node.js is an open-source and cross-platform JavaScript runtime environment CVE-2022-35255, CVE-2022-35256. Node-tar is a full function tar library for node.js CVE-2018-20834. Swagger UI is used to visualize and interact wit...

Citrix Workspace App For Linux 2212 Credential Leak Vulnerability

The Citrix Linux client emits its session credentials when starting a Citrix session. These credentials end up being recorded in the client's system log. Citrix does not consider this to be a security vulnerability. Citrix Workspace App for Linux versions 2212 is affected. Citrix Linux client...

Citrix Workspace App For Linux 2212 Credential Leak

Citrix Linux client credential leak The Citrix Linux client emits its session credentials when starting a Citrix session. These credentials end up being recorded in the client's system log. Citrix do not consider this to be a security vulnerability. Software affected - Citrix Workspace App for...

Citrix Workspace App fails to open ICA file automatically

CWA configuration manager fails to open ICA file automatically with the error message: "ICA Client Configuration Manager: Could not find the file names C:\Users\..\launch.ica. Please check your installation, or contact your administrator."...

Citrix Customer Experience Improvement Program (CEIP) for Citrix Workspace app

Provide instructions to disable the CEIP data collection for Workspace app...

How to disable 'Remember my password' option in Citrix Workspace App?

How to disable 'Remember my password' option in Citrix Workspace App?...

The vulnerability of the remote access tool for VMware Workspace ONE Assist, related to lack of access control, allows a perpetrator to circumvent existing security restrictions and enhance their privileges.

The vulnerability of the remote access tool for VMware Workspace ONE Assist is related to lack of access control mechanisms. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions and gain increased privileges...

The vulnerability of the remote access tool for VMware Workspace ONE Assist exists due to the lack of security measures taken to protect the website structure. This allows attackers to carry out XSS attacks.

The vulnerability of the remote access tool for VMware Workspace ONE Assist exists due to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

The vulnerability of the remote access tool for VMware Workspace ONE Assist lies in its authentication procedures’ flaws, which allow attackers to bypass the authentication process and gain increased privileges.

The vulnerability of the remote access tool for VMware Workspace ONE Assist is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication process and gain increased privileges...

How to hide "Save To My Device" option in Workspace app for HTML5

Hide "Save To My Device" option in Workspace App for HTML5...

Google Takes Gmail Security to the Next Level with Client-Side Encryption

Google on Friday announced that its client-side encryption for Gmail is in beta for Workspace and education customers as part of its efforts to secure emails sent using the web version of the platform. The development comes at a time when concerns about online privacy and data security are at an...

VMware Workspace One Access / VMware Identity Manager Multiple Vulnerabilities (VMSA-2022-0032)

The VMware Workspace One Access formerly VMware Identity Manager application running on the remote host is affected by the following vulnerabilities: - An authentication remote code execution vulnerability. A malicious actor with administrator and network access may be able to remotely execute co...

CVE-2022-31700

VMware Workspace ONE Access and Identity Manager contain an authenticated remote code execution vulnerability. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 7.2...