Vulnerabilidades de Gainsight
CVEs publicadas que afetam produtos de Gainsight: 2 registro(s), com severidade, exploração e correções.
CVE-2026-31382
Média · 6.1
CWE-79 20/03/2026
Gainsight Assist reflected XSS/HTML injection
The error_description parameter is vulnerable to Reflected XSS. An attacker can bypass the domain's WAF using a Safari-specific onpagereveal payload.
CVE-2026-31381
Média · 5.3
CWE-598 20/03/2026
Gainsight Assist plugin information disclosure
An attacker can extract user email addresses (PII) exposed in base64 encoding via the state parameter in the OAuth callback URL.