CVE-2022-31688 is a Reflected Cross-Site Scripting (XSS) vulnerability affecting VMware Workspace ONE Assist versions prior to 22.10. This flaw, stemming from improper user input sanitization, allows a malicious actor to inject JavaScript code into a target user's browser with some user interaction. Rated Medium severity (CVSS 6.1), it requires user interaction and could lead to limited confidentiality and integrity impacts. While there are no known public exploits (Metasploit, Nuclei, ExploitDB) or KEV entries, the vulnerability has garnered significant community discussion and media coverage, indicating awareness within the security community.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 22.10CPE matchmatch criteria | cpe:2.3:a:vmware:workspace_one_assist:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.