Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

CVE-2026-31381

Gainsight Assist plugin information disclosure

An attacker can extract user email addresses (PII) exposed in base64 encoding via the state parameter in the OAuth callback URL.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Gainsight
Products
Assist Gainsight Assist
CVE-2026-31382

Gainsight Assist reflected XSS/HTML injection

The error_description parameter is vulnerable to Reflected XSS. An attacker can bypass the domain's WAF using a Safari-specific onpagereveal payload.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Gainsight
Products
Assist Gainsight Assist