Stored Cross-Site Scripting Vulnerability in Active IQ Unified Manager by NetApp

CVE-2022-23239

What is CVE-2022-23239?

Active IQ Unified Manager versions prior to 9.11P1 present a vulnerability that allows administrative users to execute a Stored Cross-Site Scripting (XSS) attack. This vulnerability can lead to potential session hijacking and data theft, as attackers can inject malicious scripts into web pages viewed by users. Organizations should promptly update their systems to mitigate the risk associated with this security flaw. For further prevention measures and details, refer to the advisory provided by NetApp.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References