CVE-2022-23239
published 2023-02-28CVE-2022-23239: Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.11P1 are susceptible to a vulnerability which allows…
PriorityP419medium4.8CVSS 3.1
AVNACLPRHUIRSCCLILAN
EPSS
0.34%
26.4th percentile
Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.11P1 are susceptible to a vulnerability which allows administrative users to perform a Stored Cross-Site Scripting (XSS) attack.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| netapp | active_iq_unified_manager | < 9.11p1 | 9.11p1 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
NetApp Active IQ Unified Manager for VMware up to 9.11 cross site scripting (ntap-20220901-0001 / EUVD-2022-28326)
vuldb·2026-04-30·CVSS 4.8
CVE-2022-23239 [MEDIUM] NetApp Active IQ Unified Manager for VMware up to 9.11 cross site scripting (ntap-20220901-0001 / EUVD-2022-28326)
A vulnerability classified as problematic was found in NetApp Active IQ Unified Manager for VMware up to 9.11. Affected is an unknown function. The manipulation results in cross site scripting.
This vulnerability is reported as CVE-2022-23239. The attack can be launched remotely. No exploit exists.
It is advisable to implement a patch to correct this issue.
GHSA
GHSA-h5qq-p2jq-3rq2: Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9
ghsa_unreviewed·2023-03-01
CVE-2022-23239 [MEDIUM] CWE-79 GHSA-h5qq-p2jq-3rq2: Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9
Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.11P1 are susceptible to a vulnerability which allows administrative users to perform a Stored Cross-Site Scripting (XSS) attack.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-02-28
Published