Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2024-12223

Stored Cross-site Scripting (XSS) in Nutanix Prism Central

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
TML

Description

Prism Central versions prior to 2024.3.1 are vulnerable to a stored cross-site scripting attack via the Events component, allowing an attacker to hijack a victim user’s session and perform actions in their security context.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Nutanix Prism Central

Default version status: unaffected

  • 0 to < 2024.3.1affected

References