Description
Prism Central versions prior to 2024.3.1 are vulnerable to a stored cross-site scripting attack via the Events component, allowing an attacker to hijack a victim user’s session and perform actions in their security context.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Nutanix | Prism Central | < 2024.3.1 | 2024.3.1 |