Not rated

CVE-2022-22944 VMware Workspace ONE Boxer contains a stored cross-site scripting (XSS) vulnerability

Description

VMware Workspace ONE Boxer contains a stored cross-site scripting (XSS) vulnerability. Due to insufficient sanitization and validation, in VMware Workspace ONE Boxer calendar event descriptions, a malicious actor can inject script tags to execute arbitrary script within a user's window.

Affected products and versions

Product	Affected versions	Fixed in
VMware Workspace ONE Boxer	Versions not published

Do you use VMware Workspace ONE Boxer?

Track this CVE Watch VMware Workspace ONE Boxer Check my SBOMs

www.cveye.io/en/cve/CVE-2022-22944

Timeline

Published March 2, 2022
Last modified August 3, 2024

References

www.vmware.com www.vmware.com

Track this CVE