CVE-2022-23239: XSS
Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.11P1 are susceptible to a vulnerability which allows administrative users to perform a Stored Cross-Site Scripting (XSS) attack.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2022-23239.
What is the severity of CVE-2022-23239?
The severity of CVE-2022-23239 is medium (4.8).
What is the affected software for CVE-2022-23239?
The affected software for CVE-2022-23239 is Netapp Active Iq Unified Manager version up to 9.11p1 on Linux, VMware vSphere, and Windows.
What is the vulnerability description of CVE-2022-23239?
CVE-2022-23239 is a vulnerability in Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.11P1, allowing administrative users to perform a Stored Cross-Site Scripting (XSS) attack.
How can I fix CVE-2022-23239?
To fix CVE-2022-23239, users should update Active IQ Unified Manager to version 9.11P1 or later.