Skip to content
OpenAdvisories

Vendor

Nutanix

3 known vulnerabilities.

Products

Cisco Intersight Device Connector for Prism Central 1 Prism Central 1 Acropolis Operating System (AOS) 1 AHV 0 Files 0 Kubernetes Engine 0 AOS 0 Data Lens 0 Database Service 0 Flow 0 Objects 0 Self-Service 0
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-84731

    Pre-Authentication Admin Bypass and Remote Code Execution in Nutanix Prism Gateway inside AOS

    An unauthenticated remote attacker can bypass authentication and gain full access to administrative API endpoints in Nutanix Prism Element by including a crafted internal management HTTP header. The vulnerability is caused by a misconfiguration in the applica…

    Nutanix Acropolis Operating System (AOS)
  • Critical 9.3
    CVE-2024-12223

    Stored Cross-site Scripting (XSS) in Nutanix Prism Central

    Prism Central versions prior to 2024.3.1 are vulnerable to a stored cross-site scripting attack via the Events component, allowing an attacker to hijack a victim user’s session and perform actions in their security context.

    Nutanix Prism Central