6.1
Medium
CVE-2022-31688 VMware Workspace ONE Assist prior to 22.10 contains a Reflected cross-site scripting (XSS) vulnerability
Description
VMware Workspace ONE Assist prior to 22.10 contains a Reflected cross-site scripting (XSS) vulnerability. Due to improper user input sanitization, a malicious actor with some user interaction may be able to inject javascript code in the target user's window.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware Workspace ONE Assist | Versions not published |
Other CVEs of VMware Workspace ONE Assist
The 5 CVEs of VMware Workspace ONE Assist →
CVE-2022-31687
VMware Workspace ONE Assist prior to 22.10 contains a Broken Access Control vulnerability
9.8
Critical
CVE-2022-31689
VMware Workspace ONE Assist prior to 22.10 contains a Session fixation vulnerability
9.8
Critical
CVE-2022-31685
VMware Workspace ONE Assist prior to 22.10 contains an Authentication Bypass vulnerability
9.8
Critical
CVE-2022-31686
VMware Workspace ONE Assist prior to 22.10 contains a Broken Authentication Method vulnerability
9.8
Critical