← Database

CVE-2022-31663

MEDIUM CVSS: 6.1 Published: 2022-08-05 Modified: 2026-06-17

Description

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a reflected cross-site scripting (XSS) vulnerability. Due to improper user input sanitization, a malicious actor with some user interaction may be able to inject javascript code in the target user's window.

Affected Platforms

Microsoft WindowsVmware Identity ManagerVmware One AccessVmware Access ConnectorLinux Linux KernelVmware Identity Manager Connector

Weakness Type

CWE-79

References