CVE-2022-31663

Description

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a reflected cross-site scripting (XSS) vulnerability. Due to improper user input sanitization, a malicious actor with some user interaction may be able to inject javascript code in the target user's window.

Related CPE's

avmwareidentity_manager3.3.4*******

avmwareidentity_manager3.3.5*******

avmwareidentity_manager3.3.6*******

avmwareone_access21.08.0.1*******

avmwareone_access21.08.0.0*******

olinuxlinux_kernel-*******

avmwareidentity_manager_connector3.3.4*******

avmwareidentity_manager_connector3.3.5*******

avmwareidentity_manager_connector3.3.6*******

avmwareidentity_manager_connector19.03.0.1*******

References

https://www.vmware.com/security/advisories/VMSA-2022-0021.html

PatchVendor Advisory

CvssV3 impact

Could not find any metrics

CvssV2 impact

Could not find any metrics
Created by Yello
About Severity.io