Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2022-03-02	CVE-2022-22944	Cross-site Scripting vulnerability in VMWare Workspace ONE Boxer VMware Workspace ONE Boxer contains a stored cross-site scripting (XSS) vulnerability. network low complexity vmware CWE-79	5.4
2020-01-17	CVE-2020-3940	Improper Certificate Validation vulnerability in VMWare products VMware Workspace ONE SDK and dependent mobile application updates address sensitive information disclosure vulnerability. network high complexity vmware CWE-295	5.9