CVE-2022-22944

VMware Workspace ONE Boxer contains a stored cross-site scripting (XSS) vulnerability

published March 2, 2022

CVSS
—
EPSS
0%
Percentile
38.9
In the wild
Unconfirmed
What it is

VMware Workspace ONE Boxer contains a stored cross-site scripting (XSS) vulnerability. Due to insufficient sanitization and validation, in VMware Workspace ONE Boxer calendar event descriptions, a malicious actor can inject script tags to execute arbitrary script within a user's window.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00461 · 38.9th percentile
Published
2022-03-02T20:50Z
EPSS history
Timeline
  • 02 MAR 20:50Z
    VMware Workspace ONE Boxer contains a stored cross-site scripting (XSS) vulnerability
    cvelistv5