Skip to content
OpenAdvisories

Vendor

Gainsight

2 known vulnerabilities.

Products

Gainsight Assist 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-31382

    Gainsight Assist reflected XSS/HTML injection

    The error_description parameter is vulnerable to Reflected XSS. An attacker can bypass the domain's WAF using a Safari-specific onpagereveal payload.

    Gainsight Gainsight Assist
  • Medium 5.3
    CVE-2026-31381

    Gainsight Assist plugin information disclosure

    An attacker can extract user email addresses (PII) exposed in base64 encoding via the state parameter in the OAuth callback URL.

    Gainsight Gainsight Assist