CVE-2013-3320

Cross-site Scripting (XSS) vulnerability in NetApp OnCommand System Manager before 2.2 allows remote attackers to inject arbitrary web script or HTML via the 'full-name' and 'comment' fields.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2020-01-29

Last modified

2024-08-06

Weaknesses

CWE-79

Affected products

• Oncommand System Manager (Netapp)

References

• http://www.securityfocus.com/bid/59688
• https://exchange.xforce.ibmcloud.com/vulnerabilities/84060
• https://exchange.xforce.ibmcloud.com/vulnerabilities/84061