Workspace One Boxer
by VMware
CVEs (2)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2020-3940 | Med | 0.38 | 5.9 | 0.01 | Jan 17, 2020 | VMware Workspace ONE SDK and dependent mobile application updates address sensitive information disclosure vulnerability. | ||
| CVE-2022-22944 | Med | 0.35 | 5.4 | 0.00 | Mar 2, 2022 | VMware Workspace ONE Boxer contains a stored cross-site scripting (XSS) vulnerability. Due to insufficient sanitization and validation, in VMware Workspace ONE Boxer calendar event descriptions, a malicious actor can inject script tags to execute arbitrary script within a user's… |
- risk 0.38cvss 5.9epss 0.01
VMware Workspace ONE SDK and dependent mobile application updates address sensitive information disclosure vulnerability.
- risk 0.35cvss 5.4epss 0.00
VMware Workspace ONE Boxer contains a stored cross-site scripting (XSS) vulnerability. Due to insufficient sanitization and validation, in VMware Workspace ONE Boxer calendar event descriptions, a malicious actor can inject script tags to execute arbitrary script within a user's…