CVE-2022-31655

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improper input sanitization in alerts.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Jul 12, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-316569.8VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain CVE-2022-316579.8VMware Workspace ONE Access and Identity Manager contain a URL injection vulnerability. A malicious actor with network access may be able toCVE-2022-316587.2VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability. A malicious actor with CVE-2022-316597.2VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability. A malicious actor with administrator and netCVE-2022-31667.5Rockwell Automation was made aware that the webservers of the Micrologix 1100 and 1400 controllers contain a vulnerability that may lead to CVE-2022-316607.8VMware Workspace ONE Access, Identity Manager and vRealize Automation contains a privilege escalation vulnerability. A malicious actor with CVE-2022-316617.8VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two privilege escalation vulnerabilities. A malicious actor wiCVE-2022-316627.5VMware Workspace ONE Access, Identity Manager, Connectors and vRealize Automation contain a path traversal vulnerability. A malicious actor CVE-2022-316636.1VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a reflected cross-site scripting (XSS) vulnerability. Due to iCVE-2022-316647.8VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability. A malicious actor with lCVE-2022-316657.2VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability. A malicious actor with CVE-2022-316665.4Harbor fails to validate user permissions while deleting Webhook policies, allowing malicious users to view, update and delete Webhook polic
CVE-2022-31655: Medium severity, CVSS 5.4 | Vulnix