CVE-2017-15515 NetApp SnapCenter Server prior to 4.0 is susceptible to cross site scripting vulnerability that could allow a privileged user to inject arbitrary scripts into the custom secondary policy label field.
MediumCVSS 4.8
EPSS 0.68%
- Published
- Updated
- Exploit status
- No public exploit known
Description
NetApp SnapCenter Server prior to 4.0 is susceptible to cross site scripting vulnerability that could allow a privileged user to inject arbitrary scripts into the custom secondary policy label field.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netapp snapcenter server | < 4.0 | 4.0 |
| netapp snapcenter server | = Versions prior to 4.0 | No fix listed |
References
- 107272 third-party-advisory vdb-entry
- security.netapp.com patch vendor-advisory