CVE-2013-3320

published 2020-01-29

CVE-2013-3320: Cross-site Scripting (XSS) vulnerability in NetApp OnCommand System Manager before 2.2 allows remote attackers to inject arbitrary web script or HTML via the…

medium 6.1 CVSS 3.1

AV N AC L PR N UI R S C C L I L A N

EXPLOIT

Cross-site Scripting (XSS) vulnerability in NetApp OnCommand System Manager before 2.2 allows remote attackers to inject arbitrary web script or HTML via the 'full-name' and 'comment' fields.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
netapp	oncommand_system_manager	< 2.2	2.2

CWE-79